August 2026 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2026-Aug 2026-Aug Final 1.0 3131 2026-10-31T01:04:05 August 2026 Security Updates 2026-08-11T07:00:00 2026-10-31T01:04:05 <h2 id="this-release-consists-of-457-microsoft-cves">This release consists of 457 Microsoft CVEs:</h2> <table> <thead> <tr> <th>Product Family</th> <th>Updates per Product/Version</th> <th>Vulnerabilities Addressed</th> <th>Distinct Updates</th> <th>Type of Update</th> </tr> </thead> <tbody> <tr> <td>Azure</td> <td>1</td> <td>29</td> <td>15</td> <td>Individual</td> </tr> <tr> <td>Defender</td> <td>1</td> <td>2</td> <td>1</td> <td>Cumulative</td> </tr> <tr> <td>Developer Tools</td> <td>1</td> <td>27</td> <td>36</td> <td>Cumulative</td> </tr> <tr> <td>Edge</td> <td>1</td> <td>16</td> <td>1</td> <td>Cumulative</td> </tr> <tr> <td>Exchange Server</td> <td>1</td> <td>8</td> <td>4</td> <td>Cumulative</td> </tr> <tr> <td>Office</td> <td>1</td> <td>99</td> <td>11</td> <td>Cumulative (except 2016)</td> </tr> <tr> <td>Office 2016</td> <td>1</td> <td>99</td> <td>18</td> <td>Individual</td> </tr> <tr> <td>Other</td> <td>1</td> <td>9</td> <td>4</td> <td>Individual</td> </tr> <tr> <td>SharePoint Server</td> <td>1</td> <td>30</td> <td>3</td> <td>Cumulative</td> </tr> <tr> <td>Windows</td> <td>1</td> <td>240</td> <td>32</td> <td>Cumulative</td> </tr> </tbody> </table> <h3 id="notable-cves">Notable CVEs</h3> <table> <thead> <tr> <th>CVE ID</th> <th>Title</th> <th>Notable Item</th> </tr> </thead> <tbody> <tr> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62832">CVE-2026-62832</a></td> <td>Windows User Profile Service Elevation of Privilege Vulnerability</td> <td>Publicly Known</td> </tr> <tr> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-68820">CVE-2026-68820</a></td> <td>Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability</td> <td>Exploitation Detected</td> </tr> <tr> <td><a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69414">CVE-2026-69414</a></td> <td>Microsoft Defender Elevation of Privilege Vulnerability</td> <td>Publicly Known</td> </tr> </tbody> </table> <h2 id="we-are-republishing-2-non-microsoft-cves-listed-and-350-chrome-cves">We are republishing 2 non-Microsoft CVEs (listed) and 350 Chrome CVEs:</h2> <table> <thead> <tr> <th>CNA</th> <th>Tag</th> <th>CVE</th> <th>FAQs?</th> <th>Workarounds?</th> <th>Mitigations?</th> </tr> </thead> <tbody> <tr> <td>MITRE</td> <td>Windows TPM</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-6726">CVE-2026-6726</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> <tr> <td>MITRE</td> <td>Windows TPM</td> <td><a href="https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2026-6727">CVE-2026-6727</a></td> <td><strong>Yes</strong></td> <td>No</td> <td>No</td> </tr> </tbody> </table> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>October 31, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience">You asked, we delivered: Introducing new features for an improved security experience</a></td> </tr> <tr> <td>October 28, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td> </tr> <tr> <td>October 22, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td> </tr> <tr> <td>November 12, 2024</td> <td><a href="https://aka.ms/MSRC-CSAF-Blog">Toward greater transparency: Publishing machine-readable CSAF files</a></td> </tr> <tr> <td>June 27, 2024</td> <td><a href="https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/">Toward greater transparency: Unveiling Cloud Service CVEs</a></td> </tr> <tr> <td>April 9, 2024</td> <td><a href="https://aka.ms/MSRC-CWE-Blog">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td> </tr> <tr> <td>January 6, 2023</td> <td><a href="https://msrc.microsoft.com/blog/2023/01/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td> </tr> <tr> <td>January 11, 2022</td> <td><a href="https://aka.ms/SUGNotificationProfile">Coming Soon: New Security Update Guide Notification System</a></td> </tr> <tr> <td>February 9, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td> </tr> <tr> <td>January 13, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td> </tr> <tr> <td>December 8, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td> </tr> <tr> <td>November 9, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td> </tr> </tbody> </table> <h2 id="relevant-resources">Relevant Resources</h2> <ul> <li>The new Hotpatching feature is now generally available. Please see <a href="https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li> <li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5120228">5120228</a></td> <td>Windows Server 2025 Hotpatch</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5120233">5120233</a></td> <td>Windows Server 2025</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5120242">5120242</a></td> <td>Windows Server 2022</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5121573">5121573</a></td> <td>Exchange Server Subscription Edition RTM</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5121574">5121574</a></td> <td>Exchange Server 2019 CU15</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5121575">5121575</a></td> <td>Exchange Server 2019 CU14</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5121576">5121576</a></td> <td>Exchange Server 2016 CU23</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows Server 2025 (Server Core installation) Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Windows Server 2025 Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows App for Mac Windows Remote Help Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft Exchange Server 2019 Cumulative Update 14 Visual Studio Code PowerShell 7.5 PowerShell 7.4 PowerShell 7.6 Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems .NET 10.0 runtime installed on Windows Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems .NET 8.0 runtime installed on Windows .NET 9.0 runtime installed on Windows Microsoft Visual Studio 2026 version 18.8 Microsoft Visual Studio 2022 version 17.14 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems .NET 10.0 runtime installed on Mac OS .NET 10.0 runtime installed on Linux .NET 8.0 runtime installed on Linux .NET 8.0 runtime installed on Mac OS .NET 9.0 runtime installed on Linux .NET 9.0 runtime installed on Mac OS Microsoft Visual Studio Code CoPilot Chat Extension Python extension for Visual Studio Code SkiaSharp 4.151.2 Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 on Windows 11 version 26H1 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2 Microsoft Teams for Android Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016 Microsoft Teams Azure SQL Managed Instance Azure Service Bus Microsoft Office for Android Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC for Mac 2024 Microsoft Office 365 for Mac Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Office Online Server Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft PowerPoint 2016 (32-bit edition) Microsoft PowerPoint 2016 (64-bit edition) Microsoft Teams for iOS Microsoft Access 2016 (32-bit edition) Microsoft Access 2016 (64-bit edition) OneDrive for MacOS Microsoft SharePoint Online Microsoft Fabric Microsoft Purview eDiscovery Microsoft Entra Provisioning Service Azure Active Directory Microsoft 365 Admin Center Azure Data Factory Azure SQL Database Azure Stack HCI Microsoft Entra ID Azure Monitor Agent Linux Extension Azure Confidential Compute VM SKU DCasv5/DCadsv5 Azure Confidential Compute VM SKU ECasv5/ECadsv5 Azure Confidential Compute VM SKU DCasv6/DCadsv6 Azure Confidential Compute VM SKU ECasv6/ECadsv6 DCesv6-series Azure VM Ecesv6-series Azure VM Microsoft HPC Pack 2019 Azure CycleCloud 8.9.1 Azure CycleCloud 8.9.2 Microsoft Entra Connect Azure SRE Agent Azure Logic Apps Azure Kubernetes Service Application Insights Profiler Azure Confidential Ledger Azure Managed Instance for Apache Cassandra Azure Web Apps Azure Data Manager for Energy Azure Logic Apps Azure ARC Microsoft Partner Center Azure Virtual Machines Microsoft Copilot in Azure Microsoft Planetary Computer Pro (GeoCatalog) Microsoft Edge (Chromium-based) Microsoft Edge for iOS Microsoft Edge (Chromium-based) Microsoft Edge for Android Microsoft Edge for MAC Microsoft Edge for Linux Microsoft Edge for Windows Microsoft Exchange Online Microsoft Exchange Server Subscription Edition RTM Microsoft Dynamics NAV 2017 on Windows Server 2012 Microsoft Dynamics NAV 2018 on Windows Server 2012 Microsoft Dynamics 365 (on-premises) version 9.1 Copilot Cowork Microsoft Defender for Endpoint for Mac Microsoft Malware Protection Engine Power BI Report Server App Installer Azure Storage Explorer azl3 kernel 6.6.145.2-1 on Azure Linux 3.0 azl3 kernel 6.6.150.1-1 on Azure Linux 3.0 azl3 kernel 6.6.152.1-1 on Azure Linux 3.0 azl3 hdf5 1.14.6-4 on Azure Linux 3.0 azl3 popt 1.19-1 on Azure Linux 3.0 azl3 rsync 3.4.3-1 on Azure Linux 3.0 azl3 rsync 3.5.0-1 on Azure Linux 3.0 azl3 apr-util 1.6.3-2 on Azure Linux 3.0 azl3 kernel 6.6.143.1-1 on Azure Linux 3.0 azl3 kata-containers 3.19.1.kata3-7 on Azure Linux 3.0 azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 azl3 libkcapi 1.5.0-2 on Azure Linux 3.0 azl3 rpm 4.18.2-1 on Azure Linux 3.0 azl3 rpm 4.18.2-2 on Azure Linux 3.0 azl3 gh 2.62.0-20 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.14.0-4 on Azure Linux 3.0 azl3 libvirt 10.10.0-2 on Azure Linux 3.0 azl3 packer 1.9.5-18 on Azure Linux 3.0 azl3 telegraf 1.31.0-28 on Azure Linux 3.0 azl3 perl 5.38.2-514 on Azure Linux 3.0 azl3 perl 5.38.2-516 on Azure Linux 3.0 azl3 cpio 2.14-1 on Azure Linux 3.0 azl3 cpio 2.14-2 on Azure Linux 3.0 azl3 expat 2.8.2-1 on Azure Linux 3.0 azl3 clamav 1.5.3-1 on Azure Linux 3.0 azl3 glibc 2.38-20 on Azure Linux 3.0 azl3 glibc 2.38-21 on Azure Linux 3.0 azl3 nmap 7.95-4 on Azure Linux 3.0 azl3 nmap 7.95-5 on Azure Linux 3.0 azl3 openssh 9.8p1-9 on Azure Linux 3.0 azl3 openssh 9.8p1-10 on Azure Linux 3.0 azl3 vim 9.2.0782-1 on Azure Linux 3.0 azl3 iperf3 3.17.1-4 on Azure Linux 3.0 azl3 python3 3.12.9-14 on Azure Linux 3.0 azl3 shim-unsigned-aarch64 16.1-2 on Azure Linux 3.0 azl3 shim-unsigned-x64 16.1-2 on Azure Linux 3.0 azl3 systemd 255-33 on Azure Linux 3.0 azl3 systemd-bootstrap 250.3-19 on Azure Linux 3.0 azl3 systemd 255-33 on Azure Linux 3.0 azl3 systemd 255-34 on Azure Linux 3.0 azl3 systemd-bootstrap 250.3-20 on Azure Linux 3.0 azl3 postgresql 16.14-1 on Azure Linux 3.0 azl3 postgresql 16.15-1 on Azure Linux 3.0 azl3 vitess 19.0.4-12 on Azure Linux 3.0 azl3 vitess 19.0.4-13 on Azure Linux 3.0 azl3 vim 9.2.0782-1 on Azure Linux 3.0 azl3 golang 1.25.12-1 on Azure Linux 3.0 azl3 golang 1.26.5-2 on Azure Linux 3.0 azl3 golang 1.27.0-1 on Azure Linux 3.0 azl3 golang 1.26.7-1 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 azl3 lvm2 2.03.23-1 on Azure Linux 3.0 azl3 bluez 5.63-7 on Azure Linux 3.0 azl3 python-lxml 4.9.3-2 on Azure Linux 3.0 azl3 python3 3.12.14-2 on Azure Linux 3.0 azl3 python3 3.12.14-1 on Azure Linux 3.0 azl3 swtpm 0.8.1-5 on Azure Linux 3.0 azl3 swtpm 0.8.1-6 on Azure Linux 3.0 azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0 azl3 mysql 8.0.46-1 on Azure Linux 3.0 azl3 libevent 2.1.12-1 on Azure Linux 3.0 azl3 lldpd 1.0.22-1 on Azure Linux 3.0 azl3 ntp 4.2.8p17-2 on Azure Linux 3.0 azl3 openmpi 4.1.9a1-3 on Azure Linux 3.0 azl3 libgit2 1.7.2-1 on Azure Linux 3.0 azl3 rust 1.75.0-30 on Azure Linux 3.0 azl3 rust 1.90.0-10 on Azure Linux 3.0 azl3 emacs 29.4-4 on Azure Linux 3.0 azl3 emacs 29.4-6 on Azure Linux 3.0 azl3 moby-engine 25.0.3-19 on Azure Linux 3.0 azl3 docker-cli 25.0.7-4 on Azure Linux 3.0 azl3 docker-cli 25.0.7-5 on Azure Linux 3.0 azl3 moby-engine 25.0.3-20 on Azure Linux 3.0 azl3 binutils 2.41-13 on Azure Linux 3.0 azl3 flannel 0.24.2-29 on Azure Linux 3.0 azl3 kubernetes 1.30.10-27 on Azure Linux 3.0 azl3 iscsi-initiator-utils 2.1.12-1 on Azure Linux 3.0 azl3 lttng-tools 2.13.11-1 on Azure Linux 3.0 azl3 msgpack 3.3.0-1 on Azure Linux 3.0 azl3 fluent-bit 3.1.10-7 on Azure Linux 3.0 azl3 libvirt 11.9.0-1 on Azure Linux 3.0 azl3 libsoup 3.4.4-16 on Azure Linux 3.0 azl3 libsoup 3.4.4-17 on Azure Linux 3.0 azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0 azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0 azl3 openssl 3.3.7-6 on Azure Linux 3.0 azl3 openssl 3.3.7-4 on Azure Linux 3.0 azl3 qemu 9.1.0-11 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-20 on Azure Linux 3.0 azl3 ntfs-3g 2022.10.3-3 on Azure Linux 3.0 azl3 ntfs-3g 2022.10.3-4 on Azure Linux 3.0 azl3 sos 4.6.1-2 on Azure Linux 3.0 azl3 ceph 18.2.2-12 on Azure Linux 3.0 azl3 gdk-pixbuf2 2.42.10-5 on Azure Linux 3.0 azl3 gdk-pixbuf2 2.42.10-6 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-5 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-7 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-6 on Azure Linux 3.0 azl3 ruby 3.3.5-8 on Azure Linux 3.0 azl3 ruby 3.3.5-9 on Azure Linux 3.0 azl3 ruby 3.3.5-10 on Azure Linux 3.0 azl3 rust 1.96.1-1 on Azure Linux 3.0 azl3 rust 1.75.0-31 on Azure Linux 3.0 azl3 rust 1.96.1-2 on Azure Linux 3.0 azl3 valkey 8.0.10-1 on Azure Linux 3.0 azl3 kubevirt 1.8.4-1 on Azure Linux 3.0 azl3 kubevirt 1.8.4-2 on Azure Linux 3.0 azl3 stunnel 5.74-1 on Azure Linux 3.0 azl3 python-cryptography 42.0.5-4 on Azure Linux 3.0 azl3 tar 1.35-2 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-16 on Azure Linux 3.0 azl3 valkey 8.0.11-1 on Azure Linux 3.0 azl3 trident 0.26.0-1 on Azure Linux 3.0 azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0 azl3 trident 0.26.0-1 on Azure Linux 3.0 azl3 clamav 1.5.4-2 on Azure Linux 3.0 azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0 azl3 trident 0.28.0-1 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 azl3 dnsmasq 2.93-1 on Azure Linux 3.0 azl3 golang 1.25.14-1 on Azure Linux 3.0 azl3 influxdb 2.7.5-19 on Azure Linux 3.0 azl3 influxdb 2.7.5-21 on Azure Linux 3.0 azl3 influxdb 2.7.5-20 on Azure Linux 3.0 azl3 golang 1.24.13-2 on Azure Linux 3.0 azl3 perl-DBI 1.651-1 on Azure Linux 3.0 azl3 cmake 3.30.3-15 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0 azl3 keda 2.14.1-16 on Azure Linux 3.0 azl3 keda 2.14.1-19 on Azure Linux 3.0 azl3 keda 2.14.1-18 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0 azl3 docker-compose 2.27.0-13 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-7 on Azure Linux 3.0 azl3 cert-manager 1.12.15-11 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-6 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-7 on Azure Linux 3.0 azl3 kbd 2.2.0-2 on Azure Linux 3.0 azl3 strongswan 5.9.14-9 on Azure Linux 3.0 azl3 nghttp2 1.61.0-3 on Azure Linux 3.0 azl3 python-webob 1.8.10-1 on Azure Linux 3.0 azl3 pytorch 2.2.2-16 on Azure Linux 3.0 azl3 perl-XML-Parser 2.47-2 on Azure Linux 3.0 azl3 python-mistune 3.3.0-1 on Azure Linux 3.0 azl3 libtiff 4.6.0-14 on Azure Linux 3.0 azl3 ceph 18.2.2-13 on Azure Linux 3.0 azl3 gh 2.98.0-1 on Azure Linux 3.0 azl3 sudo 1.9.17-2 on Azure Linux 3.0 azl3 cf-cli 8.7.11-8 on Azure Linux 3.0 azl3 etcd 3.5.33-1 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0 azl3 containerd2 2.2.4-8 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0 azl3 cf-cli 8.7.11-9 on Azure Linux 3.0 azl3 flannel 0.24.2-32 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0 azl3 containerd2 2.2.4-6 on Azure Linux 3.0 azl3 cri-tools 1.32.0-7 on Azure Linux 3.0 azl3 cert-manager 1.12.15-12 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0 azl3 flannel 0.24.2-31 on Azure Linux 3.0 azl3 kubernetes 1.30.10-29 on Azure Linux 3.0 azl3 telegraf 1.31.0-31 on Azure Linux 3.0 azl3 containerd2 2.3.4-1 on Azure Linux 3.0 azl3 cri-tools 1.32.0-8 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0 azl3 docker-compose 2.27.0-14 on Azure Linux 3.0 azl3 kubernetes 1.30.10-30 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0 azl3 libsolv 0.7.28-5 on Azure Linux 3.0 azl3 gdb 13.2-10 on Azure Linux 3.0 azl3 crash 9.0.0-3 on Azure Linux 3.0 azl3 gdb 13.2-11 on Azure Linux 3.0 azl3 perl-URI 5.21-2 on Azure Linux 3.0 azl3 perl-URI 5.21-3 on Azure Linux 3.0 azl3 zlib 1.3.2-1 on Azure Linux 3.0 azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0 Copilot Web azl3 bluez 5.63-6 on Azure Linux 3.0 azl3 gcc 13.2.0-7 on Azure Linux 3.0 azl3 python-urllib3 2.0.7-6 on Azure Linux 3.0 Microsoft Exchange Online Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft PowerPoint 2016 (32-bit edition) Microsoft PowerPoint 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft Access 2016 (32-bit edition) Microsoft Access 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Outlook 2016 (32-bit edition) Microsoft Outlook 2016 (64-bit edition) Windows Server 2016 Office Online Server Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft SharePoint Enterprise Server 2016 Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft SharePoint Server 2019 Microsoft Dynamics NAV 2017 on Windows Server 2012 Visual Studio Code Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) Microsoft Edge (Chromium-based) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 version 1809 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 version 1809 Microsoft Teams Power BI Report Server Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 on Windows 10 version 1607 Microsoft Dynamics NAV 2018 on Windows Server 2012 Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Azure Storage Explorer Microsoft Edge for Android Microsoft Teams for iOS Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) Azure Kubernetes Service Python extension for Visual Studio Code Microsoft Malware Protection Engine Microsoft Dynamics 365 (on-premises) version 9.1 Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft SharePoint Server Subscription Edition Azure Active Directory Microsoft Edge for iOS App Installer Microsoft Teams for Android Microsoft Defender for Endpoint for Mac Microsoft Exchange Server 2016 Cumulative Update 23 Azure Data Factory Azure ARC Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 21H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 version 22H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 24H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 25H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 23H2 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H2 Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Microsoft Office for Android OneDrive for MacOS Azure Virtual Machines Azure Logic Apps Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems PowerShell 7.4 Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Entra ID Azure Web Apps Azure Managed Instance for Apache Cassandra Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Azure Stack HCI .NET 8.0 runtime installed on Windows .NET 8.0 runtime installed on Linux .NET 8.0 runtime installed on Mac OS Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions Microsoft Partner Center .NET 9.0 runtime installed on Linux .NET 9.0 runtime installed on Mac OS .NET 9.0 runtime installed on Windows Windows Server 2025 Windows Server 2025 (Server Core installation) Microsoft Office LTSC for Mac 2024 Microsoft HPC Pack 2019 Microsoft Edge for MAC Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio Code CoPilot Chat Extension PowerShell 7.5 Microsoft Exchange Server Subscription Edition RTM DCesv6-series Azure VM Ecesv6-series Azure VM azl3 bluez 5.63-6 on Azure Linux 3.0 azl3 gcc 13.2.0-7 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 libgit2 1.7.2-1 on Azure Linux 3.0 azl3 cpio 2.14-1 on Azure Linux 3.0 azl3 tar 1.35-2 on Azure Linux 3.0 Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Microsoft SharePoint Online Azure Confidential Compute VM SKU DCasv5/DCadsv5 Azure Confidential Compute VM SKU ECasv5/ECadsv5 Azure Confidential Compute VM SKU DCasv6/DCadsv6 Azure Confidential Compute VM SKU ECasv6/ECadsv6 azl3 ceph 18.2.2-12 on Azure Linux 3.0 Copilot Web Azure Logic Apps .NET 10.0 runtime installed on Windows .NET 10.0 runtime installed on Mac OS .NET 10.0 runtime installed on Linux Windows App for Mac Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-5 on Azure Linux 3.0 azl3 systemd-bootstrap 250.3-19 on Azure Linux 3.0 azl3 python-cryptography 42.0.5-4 on Azure Linux 3.0 azl3 javapackages-bootstrap 1.14.0-4 on Azure Linux 3.0 azl3 zlib 1.3.2-1 on Azure Linux 3.0 PowerShell 7.6 Microsoft Purview eDiscovery azl3 fluent-bit 3.1.10-6 on Azure Linux 3.0 azl3 keras 3.3.3-7 on Azure Linux 3.0 azl3 mysql 8.0.46-1 on Azure Linux 3.0 azl3 shim-unsigned-aarch64 16.1-2 on Azure Linux 3.0 azl3 shim-unsigned-x64 16.1-2 on Azure Linux 3.0 Azure SRE Agent Microsoft Planetary Computer Pro (GeoCatalog) azl3 ruby 3.3.5-8 on Azure Linux 3.0 azl3 python-lxml 4.9.3-2 on Azure Linux 3.0 azl3 emacs 29.4-4 on Azure Linux 3.0 Azure Monitor Agent Linux Extension azl3 perl-XML-Parser 2.47-2 on Azure Linux 3.0 Microsoft Office 365 for Mac azl3 glibc 2.38-20 on Azure Linux 3.0 azl3 binutils 2.41-13 on Azure Linux 3.0 azl3 kernel 6.6.143.1-1 on Azure Linux 3.0 azl3 libsoup 3.4.4-16 on Azure Linux 3.0 azl3 rust 1.75.0-30 on Azure Linux 3.0 azl3 nghttp2 1.61.0-3 on Azure Linux 3.0 azl3 crash 9.0.0-3 on Azure Linux 3.0 azl3 gdb 13.2-10 on Azure Linux 3.0 Application Insights Profiler Microsoft Entra Provisioning Service Azure CycleCloud 8.9.1 Windows Remote Help azl3 nmap 7.95-4 on Azure Linux 3.0 azl3 python-mistune 3.3.0-1 on Azure Linux 3.0 azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0 Azure SQL Managed Instance Azure Service Bus azl3 rsync 3.4.3-1 on Azure Linux 3.0 azl3 gdk-pixbuf2 2.42.10-5 on Azure Linux 3.0 Microsoft Entra Connect Azure SQL Database Microsoft 365 Admin Center Azure Confidential Ledger azl3 kernel 6.6.145.2-1 on Azure Linux 3.0 azl3 hdf5 1.14.6-4 on Azure Linux 3.0 azl3 valkey 8.0.10-1 on Azure Linux 3.0 azl3 qemu 9.1.0-11 on Azure Linux 3.0 azl3 pytorch 2.2.2-16 on Azure Linux 3.0 azl3 kubernetes 1.30.10-27 on Azure Linux 3.0 azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0 azl3 influxdb 2.7.5-19 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-8 on Azure Linux 3.0 azl3 golang 1.25.12-1 on Azure Linux 3.0 azl3 popt 1.19-1 on Azure Linux 3.0 azl3 msgpack 3.3.0-1 on Azure Linux 3.0 azl3 packer 1.9.5-18 on Azure Linux 3.0 azl3 apr-util 1.6.3-2 on Azure Linux 3.0 azl3 gh 2.62.0-20 on Azure Linux 3.0 azl3 stunnel 5.74-1 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-16 on Azure Linux 3.0 azl3 vitess 19.0.4-12 on Azure Linux 3.0 azl3 golang 1.26.5-2 on Azure Linux 3.0 Azure CycleCloud 8.9.2 Microsoft Visual Studio 2026 version 18.8 azl3 docker-compose 2.27.0-13 on Azure Linux 3.0 azl3 kata-containers 3.19.1.kata3-7 on Azure Linux 3.0 azl3 kernel 6.6.150.1-1 on Azure Linux 3.0 azl3 libkcapi 1.5.0-2 on Azure Linux 3.0 azl3 rpm 4.18.2-1 on Azure Linux 3.0 azl3 cert-manager 1.12.15-11 on Azure Linux 3.0 azl3 moby-engine 25.0.3-19 on Azure Linux 3.0 azl3 telegraf 1.31.0-28 on Azure Linux 3.0 azl3 python3 3.12.9-14 on Azure Linux 3.0 azl3 libvirt 10.10.0-2 on Azure Linux 3.0 azl3 perl 5.38.2-514 on Azure Linux 3.0 azl3 expat 2.8.2-1 on Azure Linux 3.0 azl3 clamav 1.5.3-1 on Azure Linux 3.0 Copilot Cowork azl3 moby-containerd-cc 1.7.7-16 on Azure Linux 3.0 azl3 cmake 3.30.3-15 on Azure Linux 3.0 azl3 openssh 9.8p1-9 on Azure Linux 3.0 azl3 rust 1.90.0-10 on Azure Linux 3.0 azl3 vim 9.2.0782-1 on Azure Linux 3.0 azl3 vim 9.2.0782-1 on Azure Linux 3.0 azl3 trident 0.26.0-1 on Azure Linux 3.0 azl3 trident 0.26.0-1 on Azure Linux 3.0 azl3 iperf3 3.17.1-4 on Azure Linux 3.0 azl3 systemd 255-33 on Azure Linux 3.0 azl3 systemd 255-33 on Azure Linux 3.0 azl3 postgresql 16.14-1 on Azure Linux 3.0 Microsoft Fabric Azure Data Manager for Energy Microsoft Copilot in Azure azl3 cloud-hypervisor 51.1.101-2 on Azure Linux 3.0 azl3 dnsmasq 2.93-1 on Azure Linux 3.0 azl3 lvm2 2.03.23-1 on Azure Linux 3.0 azl3 perl-DBI 1.651-1 on Azure Linux 3.0 azl3 swtpm 0.8.1-5 on Azure Linux 3.0 azl3 libevent 2.1.12-1 on Azure Linux 3.0 azl3 keda 2.14.1-16 on Azure Linux 3.0 azl3 docker-cli 25.0.7-4 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-16 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-6 on Azure Linux 3.0 azl3 flannel 0.24.2-29 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-7 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-7 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-18 on Azure Linux 3.0 azl3 iscsi-initiator-utils 2.1.12-1 on Azure Linux 3.0 azl3 kbd 2.2.0-2 on Azure Linux 3.0 azl3 strongswan 5.9.14-9 on Azure Linux 3.0 azl3 rust 1.96.1-1 on Azure Linux 3.0 azl3 lldpd 1.0.22-1 on Azure Linux 3.0 azl3 ntp 4.2.8p17-2 on Azure Linux 3.0 azl3 openmpi 4.1.9a1-3 on Azure Linux 3.0 azl3 lttng-tools 2.13.11-1 on Azure Linux 3.0 azl3 python-webob 1.8.10-1 on Azure Linux 3.0 azl3 openssl 3.3.7-4 on Azure Linux 3.0 azl3 libtiff 4.6.0-14 on Azure Linux 3.0 azl3 ntfs-3g 2022.10.3-3 on Azure Linux 3.0 azl3 sos 4.6.1-2 on Azure Linux 3.0 azl3 sudo 1.9.17-2 on Azure Linux 3.0 azl3 cloud-hypervisor 52.0.152-1 on Azure Linux 3.0 azl3 cf-cli 8.7.11-8 on Azure Linux 3.0 azl3 containerd2 2.2.4-6 on Azure Linux 3.0 azl3 cri-tools 1.32.0-7 on Azure Linux 3.0 azl3 etcd 3.5.33-1 on Azure Linux 3.0 azl3 libsolv 0.7.28-5 on Azure Linux 3.0 Microsoft Edge for Linux Microsoft Edge for Windows azl3 golang 1.27.0-1 on Azure Linux 3.0 azl3 perl-URI 5.21-2 on Azure Linux 3.0 SkiaSharp 4.151.2 azl3 trident 0.28.0-1 on Azure Linux 3.0 azl3 openvmm 0.1.0-1 on Azure Linux 3.0 azl3 moby-engine 25.0.3-20 on Azure Linux 3.0 azl3 bluez 5.63-7 on Azure Linux 3.0 azl3 nmap 7.95-5 on Azure Linux 3.0 azl3 python3 3.12.14-1 on Azure Linux 3.0 azl3 kata-containers 3.32.0.kata0-5 on Azure Linux 3.0 azl3 libvirt 11.9.0-1 on Azure Linux 3.0 azl3 influxdb 2.7.5-20 on Azure Linux 3.0 azl3 edk2 20240524git3e722403cd16-20 on Azure Linux 3.0 azl3 openssl 3.3.7-6 on Azure Linux 3.0 azl3 gdb 13.2-11 on Azure Linux 3.0 azl3 ntfs-3g 2022.10.3-4 on Azure Linux 3.0 azl3 glibc 2.38-21 on Azure Linux 3.0 azl3 gh 2.98.0-1 on Azure Linux 3.0 azl3 cert-manager 1.12.15-12 on Azure Linux 3.0 azl3 cloud-provider-kubevirt 0.5.1-7 on Azure Linux 3.0 azl3 containerd2 2.2.4-8 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-9 on Azure Linux 3.0 azl3 flannel 0.24.2-31 on Azure Linux 3.0 azl3 keda 2.14.1-18 on Azure Linux 3.0 azl3 kubernetes 1.30.10-29 on Azure Linux 3.0 azl3 kube-vip-cloud-provider 0.0.10-8 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-9 on Azure Linux 3.0 azl3 kubevirt 1.8.4-1 on Azure Linux 3.0 azl3 telegraf 1.31.0-31 on Azure Linux 3.0 azl3 openssh 9.8p1-10 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-6 on Azure Linux 3.0 azl3 ruby 3.3.5-9 on Azure Linux 3.0 azl3 rust 1.75.0-31 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-20 on Azure Linux 3.0 azl3 valkey 8.0.11-1 on Azure Linux 3.0 azl3 rsync 3.5.0-1 on Azure Linux 3.0 azl3 rpm 4.18.2-2 on Azure Linux 3.0 azl3 perl 5.38.2-516 on Azure Linux 3.0 azl3 cpio 2.14-2 on Azure Linux 3.0 azl3 clamav 1.5.4-2 on Azure Linux 3.0 azl3 systemd 255-34 on Azure Linux 3.0 azl3 systemd-bootstrap 250.3-20 on Azure Linux 3.0 azl3 postgresql 16.15-1 on Azure Linux 3.0 azl3 docker-cli 25.0.7-5 on Azure Linux 3.0 azl3 golang 1.26.7-1 on Azure Linux 3.0 azl3 vitess 19.0.4-13 on Azure Linux 3.0 azl3 golang 1.24.13-2 on Azure Linux 3.0 azl3 swtpm 0.8.1-6 on Azure Linux 3.0 azl3 emacs 29.4-6 on Azure Linux 3.0 azl3 golang 1.25.14-1 on Azure Linux 3.0 azl3 kernel 6.6.152.1-1 on Azure Linux 3.0 azl3 kubernetes 1.30.10-30 on Azure Linux 3.0 azl3 libsoup 3.4.4-17 on Azure Linux 3.0 azl3 gdk-pixbuf2 2.42.10-6 on Azure Linux 3.0 azl3 python3 3.12.14-2 on Azure Linux 3.0 azl3 fluent-bit 3.1.10-7 on Azure Linux 3.0 azl3 influxdb 2.7.5-21 on Azure Linux 3.0 azl3 ceph 18.2.2-13 on Azure Linux 3.0 azl3 kubevirt 1.8.4-2 on Azure Linux 3.0 azl3 keda 2.14.1-19 on Azure Linux 3.0 azl3 ruby 3.3.5-10 on Azure Linux 3.0 azl3 cf-cli 8.7.11-9 on Azure Linux 3.0 azl3 containerd2 2.3.4-1 on Azure Linux 3.0 azl3 cri-tools 1.32.0-8 on Azure Linux 3.0 azl3 docker-buildx 0.14.0-17 on Azure Linux 3.0 azl3 docker-compose 2.27.0-14 on Azure Linux 3.0 azl3 flannel 0.24.2-32 on Azure Linux 3.0 azl3 moby-containerd-cc 1.7.7-17 on Azure Linux 3.0 azl3 prometheus-adapter 0.12.0-10 on Azure Linux 3.0 azl3 kata-containers 4.1.0.kata0-1 on Azure Linux 3.0 azl3 kata-containers-cc 3.15.0.aks0-21 on Azure Linux 3.0 azl3 rsyslog 8.2308.0-7 on Azure Linux 3.0 azl3 rust 1.96.1-2 on Azure Linux 3.0 azl3 perl-URI 5.21-3 on Azure Linux 3.0 azl3 kernel 6.6.157.1-1 on Azure Linux 3.0 Microsoft Edge (Chromium-based) azl3 kubevirt-openvmm 1.9.0-1 on Azure Linux 3.0 Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 3.5 on Windows 11 version 26H1 mruby bigint.c udiv floating point comparison with incorrect operator Mariner VulDB Yes CVE-2022-4996 Floating Point Comparison with Incorrect Operator 21509-17084 21500-17084 21716-17084 21509-17084 21500-17084 21716-17084 Moderate 21509-17084 Moderate 21500-17084 Moderate 21716-17084 5.3 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C 21509-17084 5.3 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C 21500-17084 5.3 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C 21716-17084 Release Notes 21509-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21509-17084 Release Notes 1.0 2026-08-25T01:07:04 <p>Information published.</p> 2.0 2026-09-25T02:30:18 <p>Information published.</p> Ceph: AES-CBC misuse in CephX and RADOSGW enables authentication bypass and credential forgery Mariner GitHub_M Yes CVE-2025-30156 Use of a Broken or Risky Cryptographic Algorithm 20730-17084 21900-17084 20730-17084 21900-17084 Important 20730-17084 Important 21900-17084 8.9 8.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L 20730-17084 8.9 8.9 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L 21900-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20730-17084 Security Update 20730-17084 Release Notes 21900-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21900-17084 Release Notes 1.0 2026-08-29T01:02:34 <p>Information published.</p> 2.0 2026-09-06T04:47:39 <p>Information published.</p> 3.0 2026-09-23T02:13:04 <p>Information published.</p> 4.0 2026-09-24T01:35:30 <p>Information published.</p> Apache Portable Runtime Utility: apr_password_validate() vulnerable to timing attack Mariner apache Yes CVE-2025-49506 Observable Timing Discrepancy 21667-17084 21667-17084 Important 21667-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21667-17084 CBL-Mariner Releases 21667-17084 No Security Update 1.6.3-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21667-17084 CBL-Mariner Releases 1.0 2026-08-09T01:02:14 <p>Information published.</p> 2.0 2026-08-10T14:42:27 <p>Information published.</p> 3.0 2026-08-23T14:44:21 <p>Information published.</p> Dnsmasq: infinite loop dos in dnssec nsec/nsec3 type bitmap parsing Mariner redhat Yes CVE-2026-13002 Loop with Unreachable Exit Condition ('Infinite Loop') 21735-17084 21735-17084 Moderate 21735-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21735-17084 Release Notes 21735-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21735-17084 Release Notes 1.0 2026-08-20T22:00:21 <p>Information published.</p> 2.0 2026-09-05T02:09:56 <p>Information published.</p> 3.0 2026-09-25T02:29:53 <p>Information published.</p> Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host Mariner redhat Yes CVE-2026-13622 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21835-17084 21902-17084 22266-17084 21835-17084 21902-17084 22266-17084 Important 21835-17084 Important 21902-17084 Important 22266-17084 8.8 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21835-17084 8.8 8.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21902-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 22266-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21835-17084 Security Update 21835-17084 Release Notes 21902-17084 Security Update 1.8.4-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21902-17084 Release Notes Release Notes 22266-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 22266-17084 Release Notes 5.0 2026-10-18T01:47:26 <p>Information published.</p> 1.0 2026-09-09T15:00:35 <p>Information published.</p> 2.0 2026-09-23T02:39:28 <p>Information published.</p> 3.0 2026-09-24T02:21:01 <p>Information published.</p> 4.0 2026-10-17T14:50:14 <p>Information published.</p> 6.0 2026-10-31T01:04:05 <p>Information published.</p> Gdb: gdb: out-of-bounds write in stabs parser read_member_functions() via crafted elf Mariner redhat Yes CVE-2026-13732 Out-of-bounds Write 21520-17084 21519-17084 21820-17084 21520-17084 21519-17084 21820-17084 Important 21520-17084 Important 21519-17084 Important 21820-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21520-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21519-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21820-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21520-17084 Security Update 21520-17084 Release Notes 21519-17084 21820-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21519-17084 21820-17084 Release Notes 2.0 2026-09-09T14:54:51 <p>Information published.</p> 3.0 2026-09-25T02:20:57 <p>Information published.</p> 1.0 2026-09-03T01:08:59 <p>Information published.</p> RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate Mariner openssl Yes CVE-2026-14457 NULL Pointer Dereference 21655-17084 21716-17084 21734-17084 21500-17084 21655-17084 21716-17084 21734-17084 21500-17084 Important 21655-17084 Important 21716-17084 Important 21734-17084 Important 21500-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21655-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21734-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 2.0 2026-09-07T02:01:24 <p>Information published.</p> 3.0 2026-09-09T01:50:09 <p>Information published.</p> 1.0 2026-08-27T01:12:43 <p>Information published.</p> PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound Mariner PostgreSQL Yes CVE-2026-14662 Integer Overflow or Wraparound 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:32:16 <p>Information published.</p> 2.0 2026-08-23T15:02:40 <p>Information published.</p> PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext Mariner PostgreSQL Yes CVE-2026-14663 Cleartext Storage in a File or on Disk 21725-17084 21725-17084 Moderate 21725-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:02:01 <p>Information published.</p> 1.0 2026-08-14T19:28:51 <p>Information published.</p> PostgreSQL regexp heap buffer overflow executes arbitrary code Mariner PostgreSQL Yes CVE-2026-14664 Heap-based Buffer Overflow 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:02:21 <p>Information published.</p> 1.0 2026-08-14T19:30:35 <p>Information published.</p> PostgreSQL row security caching disregards role modifications Mariner PostgreSQL Yes CVE-2026-14666 Improper Preservation of Consistency Between Independent Representations of Shared State 21725-17084 21725-17084 Low 21725-17084 4.2 3.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:29:43 <p>Information published.</p> 2.0 2026-08-23T15:02:11 <p>Information published.</p> PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read Mariner PostgreSQL Yes CVE-2026-14668 Access of Resource Using Incompatible Type ('Type Confusion') 21725-17084 21725-17084 Important 21725-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:22:03 <p>Information published.</p> 2.0 2026-08-14T19:22:22 <p>Information published.</p> 3.0 2026-08-23T15:00:52 <p>Information published.</p> PostgreSQL plperl tied object heap buffer overflow executes arbitrary code Mariner PostgreSQL Yes CVE-2026-14670 Heap-based Buffer Overflow 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:00:18 <p>Information published.</p> 1.0 2026-08-14T19:17:23 <p>Information published.</p> PostgreSQL refint plan cache type confusion executes arbitrary code Mariner PostgreSQL Yes CVE-2026-14671 Access of Resource Using Incompatible Type ('Type Confusion') 21725-17084 21725-17084 Important 21725-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:03:25 <p>Information published.</p> 1.0 2026-08-14T19:36:38 <p>Information published.</p> PostgreSQL observable response discrepancy with non-default scram_iterations provides user existence oracle Mariner PostgreSQL Yes CVE-2026-14672 Observable Response Discrepancy 21725-17084 21725-17084 Moderate 21725-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:01:03 <p>Information published.</p> 1.0 2026-08-14T19:22:52 <p>Information published.</p> PostgreSQL amcheck does not clear untrusted search path Mariner PostgreSQL Yes CVE-2026-14673 Untrusted Search Path 21725-17084 21725-17084 Low 21725-17084 3.8 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:15:47 <p>Information published.</p> 1.0 2026-08-14T19:15:50 <p>Information published.</p> 2.0 2026-08-23T14:59:57 <p>Information published.</p> PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound Mariner PostgreSQL Yes CVE-2026-14677 Integer Overflow or Wraparound 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:03:07 <p>Information published.</p> 1.0 2026-08-14T19:34:58 <p>Information published.</p> PostgreSQL pg_trgm picksplit reads past end of buffer Mariner PostgreSQL Yes CVE-2026-14678 Buffer Over-read 21725-17084 21725-17084 Moderate 21725-17084 4.3 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:37:21 <p>Information published.</p> 2.0 2026-08-23T15:03:35 <p>Information published.</p> PostgreSQL type confusion via "internal" arguments Mariner PostgreSQL Yes CVE-2026-14680 Access of Resource Using Incompatible Type ('Type Confusion') 21725-17084 21855-17084 21725-17084 21855-17084 Important 21725-17084 Important 21855-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21725-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21855-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21855-17084 Security Update 16.15-1 21855-17084 3.0 2026-09-15T01:47:42 <p>Information published.</p> 1.0 2026-08-14T19:27:54 <p>Information published.</p> 2.0 2026-09-09T15:00:03 <p>Information published.</p> systemd-oomd: unprivileged users can terminate arbitrary processes Mariner systemd Yes CVE-2026-15059 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21724-17084 21152-17084 21723-17084 21851-17084 21852-17084 21724-17084 21152-17084 21723-17084 21723-17084 21851-17084 21852-17084 Moderate 21724-17084 Moderate 21152-17084 Moderate 21723-17084 Moderate 21723-17084 Moderate 21851-17084 Moderate 21852-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21724-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21152-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21723-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21723-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21851-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21852-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21851-17084 Security Update 255-34 21851-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21852-17084 Security Update 250.3-20 21852-17084 4.0 2026-09-13T01:47:51 <p>Information published.</p> 1.0 2026-08-14T19:08:27 <p>Information published.</p> 2.0 2026-08-14T19:38:54 <p>Information published.</p> 2.0 2026-08-14T19:38:56 <p>Information published.</p> 3.0 2026-09-09T14:59:08 <p>Information published.</p> zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits Mariner PSF Yes CVE-2026-15310 Uncontrolled Resource Consumption 21811-17084 21694-17084 21897-17084 21811-17084 21694-17084 21897-17084 Low 21811-17084 Low 21694-17084 Low 21897-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21811-17084 21694-17084 Security Update 21811-17084 21694-17084 Release Notes 21897-17084 Security Update 3.12.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 Release Notes 1.0 2026-08-29T01:08:43 <p>Information published.</p> 2.0 2026-09-05T02:30:14 <p>Information published.</p> 3.0 2026-09-09T01:52:27 <p>Information published.</p> 4.0 2026-09-09T14:48:10 <p>Information published.</p> 5.0 2026-09-23T02:33:27 <p>Information published.</p> 6.0 2026-09-24T01:58:13 <p>Information published.</p> 8.0 2026-10-07T01:57:00 <p>Information published.</p> 7.0 2026-10-05T14:43:03 <p>Information published.</p> Perl versions through 5.45.1 have out-of-bounds heap reads and writes during regular expression matching via an undersized superlinear cache in S_regmatch Mariner CPANSec Yes CVE-2026-15534 Integer Overflow or Wraparound 21697-17084 21848-17084 21697-17084 21848-17084 Moderate 21697-17084 Moderate 21848-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H 21697-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H 21848-17084 CBL-Mariner Releases 21697-17084 No Security Update 5.38.2-515 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21697-17084 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21848-17084 Security Update 5.38.2-516 21848-17084 1.0 2026-08-11T01:08:00 <p>Information published.</p> 2.0 2026-08-13T00:09:20 <p>Information published.</p> 3.0 2026-09-09T14:56:04 <p>Information published.</p> 4.0 2026-09-10T03:31:34 <p>Information published.</p> PostgreSQL expression deparse allows SQL injection via EXTRACT argument Mariner PostgreSQL Yes CVE-2026-15741 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:16:20 <p>Information published.</p> 2.0 2026-08-23T15:00:07 <p>Information published.</p> PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound Mariner PostgreSQL Yes CVE-2026-15742 Integer Overflow or Wraparound 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:03:16 <p>Information published.</p> 1.0 2026-08-14T19:35:47 <p>Information published.</p> `HTTPPasswordMgr` can send saved HTTPS credentials via HTTP because of incorrect scheme matching Mariner PSF Yes CVE-2026-15806 Cleartext Transmission of Sensitive Information 21021-17084 21694-17084 21811-17084 21897-17084 21021-17084 21694-17084 21811-17084 21897-17084 Moderate 21021-17084 Moderate 21694-17084 Moderate 21811-17084 Moderate 21897-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21811-17084 Security Update 3.12.14-2 21811-17084 Release Notes 21897-17084 Security Update 3.12.14-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 Release Notes 6.0 2026-10-02T02:48:00 <p>Information published.</p> 1.0 2026-08-21T14:02:56 <p>Information published.</p> 3.0 2026-09-11T01:57:44 <p>Information published.</p> 5.0 2026-09-25T02:32:52 <p>Information published.</p> 2.0 2026-09-09T15:04:48 <p>Information published.</p> 4.0 2026-09-23T02:17:23 <p>Information published.</p> PostgreSQL type confusion in pg_restore_attribute_stats() executes arbitrary code Mariner PostgreSQL Yes CVE-2026-16238 Access of Resource Using Incompatible Type ('Type Confusion') 21725-17084 21725-17084 Important 21725-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21725-17084 1.0 2026-08-21T14:02:07 <p>Information published.</p> PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code Mariner PostgreSQL Yes CVE-2026-16239 Access of Resource Using Incompatible Type ('Type Confusion') 21725-17084 21725-17084 Important 21725-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:01:49 <p>Information published.</p> 1.0 2026-08-14T19:27:02 <p>Information published.</p> stringprep.map_table_b2() deviates from RFC 3454 Table B.2 Mariner PSF Yes CVE-2026-17084 Interpretation Conflict 21021-17084 21897-17084 21694-17084 21811-17084 21021-17084 21897-17084 21694-17084 21811-17084 Moderate 21021-17084 Moderate 21897-17084 Moderate 21694-17084 Moderate 21811-17084 Release Notes 21897-17084 Security Update 3.12.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21694-17084 21811-17084 Security Update 21694-17084 21811-17084 1.0 2026-08-21T14:03:05 <p>Information published.</p> 2.0 2026-09-06T04:36:57 <p>Information published.</p> 3.0 2026-09-09T15:04:56 <p>Information published.</p> 4.0 2026-09-23T14:26:21 <p>Information published.</p> 5.0 2026-09-24T01:59:05 <p>Information published.</p> 8.0 2026-10-07T01:56:37 <p>Information published.</p> 7.0 2026-10-05T14:42:36 <p>Information published.</p> 6.0 2026-09-29T01:56:11 <p>Information published.</p> Tar extraction in moby/go-archive can write outside the destination directory via link following Mariner Docker Yes CVE-2026-17106 Improper Link Resolution Before File Access ('Link Following') 21691-17084 21742-17084 21856-17084 21807-17084 21691-17084 21742-17084 21856-17084 21807-17084 Important 21691-17084 Important 21742-17084 Important 21856-17084 Important 21807-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21691-17084 21807-17084 Security Update 25.0.3-20 21691-17084 21807-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21742-17084 21856-17084 Security Update 25.0.7-5 21742-17084 21856-17084 1.0 2026-08-23T01:03:37 <p>Information published.</p> 2.0 2026-08-24T14:44:16 <p>Information published.</p> 3.0 2026-09-08T01:52:00 <p>Information published.</p> 4.0 2026-09-09T15:05:50 <p>Information published.</p> 5.0 2026-09-10T03:34:29 <p>Information published.</p> PostgreSQL ascii() function reads past end of buffer Mariner PostgreSQL Yes CVE-2026-18024 Buffer Over-read 21725-17084 21725-17084 Moderate 21725-17084 4.3 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:31:30 <p>Information published.</p> 2.0 2026-08-23T15:02:30 <p>Information published.</p> PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client Mariner PostgreSQL Yes CVE-2026-18408 Inclusion of Functionality from Untrusted Control Sphere 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:01:14 <p>Information published.</p> 1.0 2026-08-14T19:23:34 <p>Information published.</p> Tar: tar: toctou in incremental dumpdir 'x' rename handling allows restore path escape Mariner redhat Yes CVE-2026-18477 Time-of-check Time-of-use (TOCTOU) Race Condition 20131-17084 20131-17084 Moderate 20131-17084 4.4 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N 20131-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20131-17084 Security Update 20131-17084 1.0 2026-08-07T01:21:35 <p>Information published.</p> 2.0 2026-09-13T14:49:48 <p>Information published.</p> Super-linear CPU usage for unbounded input to csv.Sniffer.sniff() Mariner PSF Yes CVE-2026-18503 Inefficient CPU Computation 21694-17084 21694-17084 Low 21694-17084 CBL-Mariner Releases 21694-17084 No Security Update 3.12.14-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21694-17084 CBL-Mariner Releases 1.0 2026-08-14T19:05:56 <p>Information published.</p> 2.0 2026-08-23T14:57:51 <p>Information published.</p> Tar: tar: --one-top-level hardlink targets not confined to top-level directory enabling arbitrary file overwrite Mariner redhat Yes CVE-2026-18508 Improper Link Resolution Before File Access ('Link Following') 20131-17084 20131-17084 Moderate 20131-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N 20131-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20131-17084 Security Update 20131-17084 1.0 2026-08-07T01:21:22 <p>Information published.</p> 2.0 2026-09-07T01:46:21 <p>Information published.</p> Open-iscsi: open-iscsi: denial of service in iscsiuio router advertisement parsing Mariner redhat Yes CVE-2026-18726 Loop with Unreachable Exit Condition ('Infinite Loop') 21749-17084 21749-17084 Moderate 21749-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21749-17084 Release Notes 21749-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21749-17084 Release Notes 2.0 2026-09-27T23:54:05 <p>Information published.</p> 1.0 2026-09-07T01:47:18 <p>Information published.</p> Open-iscsi: open-iscsi: integer underflow in iscsiuio dhcpv6 parsing Mariner redhat Yes CVE-2026-18727 Integer Underflow (Wrap or Wraparound) 21749-17084 21749-17084 Moderate 21749-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21749-17084 Release Notes 21749-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21749-17084 Release Notes 1.0 2026-08-23T14:56:12 <p>Information published.</p> 2.0 2026-09-13T14:51:03 <p>Information published.</p> 3.0 2026-10-13T16:57:51 <p>Information published.</p> Open-iscsi: open-iscsi: integer underflow in iscsiuio ipv4 dhcp parsing Mariner redhat Yes CVE-2026-18728 Integer Underflow (Wrap or Wraparound) 21749-17084 21749-17084 Moderate 21749-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21749-17084 Release Notes 21749-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21749-17084 Release Notes 1.0 2026-08-23T14:55:55 <p>Information published.</p> 2.0 2026-09-13T14:50:52 <p>Information published.</p> 3.0 2026-09-28T03:56:39 <p>Information published.</p> Popt-devel: popt-static: off-by-one in poptstuffargs Mariner redhat Yes CVE-2026-18739 Out-of-bounds Write 21663-17084 21663-17084 Low 21663-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21663-17084 Release Notes 21663-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21663-17084 Release Notes 2.0 2026-09-07T01:46:10 <p>Information published.</p> 3.0 2026-09-09T14:55:29 <p>Information published.</p> 4.0 2026-09-25T02:33:05 <p>Information published.</p> 1.0 2026-08-07T01:08:43 <p>Information published.</p> Popt-devel: popt-static: size_t underflow in singleoptionhelp Mariner redhat Yes CVE-2026-18839 Integer Underflow (Wrap or Wraparound) 21597-17084 21845-17084 21663-17084 21597-17084 21845-17084 21663-17084 Low 21597-17084 Low 21845-17084 Low 21663-17084 2.2 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L 21597-17084 2.2 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L 21845-17084 2.2 2.2 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L 21663-17084 Release Notes 21845-17084 21663-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21845-17084 21663-17084 Release Notes 1.0 2026-08-07T01:09:30 <p>Information published.</p> 2.0 2026-08-09T01:03:39 <p>Information published.</p> 3.0 2026-08-10T14:44:34 <p>Information published.</p> 4.0 2026-09-09T14:55:51 <p>Information published.</p> 5.0 2026-09-13T14:49:27 <p>Information published.</p> 6.0 2026-09-25T02:33:59 <p>Information published.</p> Libvirt: integer overflow in nodegetfreepages rpc handler leading to heap buffer overflow Mariner redhat Yes CVE-2026-18917 Integer Overflow or Wraparound 21695-17084 21815-17084 21695-17084 21815-17084 Moderate 21695-17084 Moderate 21815-17084 6.6 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U 21695-17084 6.6 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H/E:U 21815-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21815-17084 Security Update 11.9.0-1 21815-17084 3.0 2026-09-13T01:49:48 <p>Information published.</p> 1.0 2026-08-25T01:06:47 <p>Information published.</p> 2.0 2026-09-09T14:45:29 <p>Information published.</p> HDF5 h5dump Untrusted Pointer Dereference in Binary Output of Variable-Length String Datasets Mariner HDFG Yes CVE-2026-19023 Untrusted Pointer Dereference 21627-17084 21627-17084 Low 21627-17084 Release Notes 21627-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 2.0 2026-09-25T02:29:50 <p>Information published.</p> 1.0 2026-08-07T01:04:29 <p>Information published.</p> HDF5 H5Pget_fill_value NULL Pointer Dereference via Malformed Fill Value Message Mariner HDFG Yes CVE-2026-19024 NULL Pointer Dereference 21627-17084 21627-17084 Important 21627-17084 Release Notes 21627-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 1.0 2026-08-07T01:07:37 <p>Information published.</p> 2.0 2026-09-25T02:32:29 <p>Information published.</p> HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dimensionality and dataspace rank on dataset open Mariner HDFG Yes CVE-2026-19025 Divide By Zero 21627-17084 21627-17084 Moderate 21627-17084 Release Notes 21627-17084 Security Update 1.14.6-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 2.0 2026-09-25T02:29:19 <p>Information published.</p> 1.0 2026-08-07T01:03:43 <p>Information published.</p> 3.0 2026-10-24T14:48:12 <p>Information published.</p> Nbit filter NULL/short parameter-array dereference Mariner HDFG Yes CVE-2026-19026 NULL Pointer Dereference 21627-17084 21627-17084 Moderate 21627-17084 Release Notes 21627-17084 Security Update 1.14.6-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 1.0 2026-08-07T01:06:48 <p>Information published.</p> 2.0 2026-09-07T14:45:54 <p>Information published.</p> 3.0 2026-09-25T02:32:02 <p>Information published.</p> 4.0 2026-10-24T14:44:13 <p>Information published.</p> HDF5 out-of-bounds heap read in N-Bit filter decompression Mariner HDFG Yes CVE-2026-19027 Out-of-bounds Read 21627-17084 21627-17084 Moderate 21627-17084 Release Notes 21627-17084 Security Update 1.14.6-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 1.0 2026-08-07T01:05:18 <p>Information published.</p> 3.0 2026-09-25T02:30:44 <p>Information published.</p> 2.0 2026-09-05T01:59:32 <p>Information published.</p> 4.0 2026-10-24T14:48:15 <p>Information published.</p> HDF5 integer underflow in Fletcher32 filter leads to massive out-of-bounds read Mariner HDFG Yes CVE-2026-19028 Integer Overflow or Wraparound 21627-17084 21627-17084 Moderate 21627-17084 Release Notes 21627-17084 Security Update 1.14.6-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21627-17084 Release Notes 3.0 2026-09-25T02:31:21 <p>Information published.</p> 1.0 2026-08-07T01:06:01 <p>Information published.</p> 2.0 2026-09-07T14:45:48 <p>Information published.</p> 4.0 2026-10-24T14:44:09 <p>Information published.</p> PostgreSQL pg_dump heap buffer overflow executes arbitrary code Mariner PostgreSQL Yes CVE-2026-19385 Heap-based Buffer Overflow 21725-17084 21725-17084 Important 21725-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:24:27 <p>Information published.</p> 2.0 2026-08-14T19:24:45 <p>Information published.</p> 3.0 2026-08-23T15:01:23 <p>Information published.</p> Shim/dp.c library: null-pointer dereference in is_removable_media_path() when devicepathtostr() returns null Mariner redhat Yes CVE-2026-19411 NULL Pointer Dereference 21275-17084 21277-17084 21275-17084 21277-17084 Low 21275-17084 Low 21277-17084 3.9 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L 21275-17084 3.9 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:L/A:L 21277-17084 Release Notes 21275-17084 21277-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21275-17084 21277-17084 Release Notes 2.0 2026-09-25T02:19:15 <p>Information published.</p> 1.0 2026-08-14T19:07:07 <p>Information published.</p> Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass Mariner CPANSec Yes CVE-2026-19487 Always-Incorrect Control Flow Implementation 21697-17084 21848-17084 21697-17084 21848-17084 Moderate 21697-17084 Moderate 21848-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21697-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21848-17084 CBL-Mariner Releases 21697-17084 No Security Update 5.38.2-516 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21697-17084 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21848-17084 Security Update 5.38.2-516 21848-17084 1.0 2026-08-23T15:03:46 <p>Information published.</p> 2.0 2026-09-09T15:00:13 <p>Information published.</p> 3.0 2026-09-10T03:33:02 <p>Information published.</p> Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing Mariner redhat Yes CVE-2026-19548 Use After Free 21389-17084 21389-17084 Moderate 21389-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21389-17084 Release Notes 21389-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21389-17084 Release Notes 1.0 2026-08-23T14:52:01 <p>Information published.</p> 3.0 2026-09-25T02:20:58 <p>Information published.</p> 2.0 2026-09-13T14:50:42 <p>Information published.</p> Binutils: stack buffer overflow in gnu binutils in rsrc_print_name from an untrusted pe file Mariner redhat Yes CVE-2026-19582 Out-of-bounds Write 21389-17084 21389-17084 Important 21389-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21389-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21389-17084 Security Update 21389-17084 1.0 2026-08-25T01:03:55 <p>Information published.</p> 2.0 2026-09-07T01:49:01 <p>Information published.</p> Packer vulnerable to arbitrary file write via crafted plugin archive during installation Mariner HashiCorp Yes CVE-2026-19589 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21666-17084 21666-17084 Important 21666-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N 21666-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21666-17084 Security Update 1.9.5-20 21666-17084 1.0 2026-08-20T21:59:48 <p>Information published.</p> 2.0 2026-09-05T01:47:25 <p>Information published.</p> Libdm: lvm2: libdm: denial of service via uncontrolled recursion in config parser Mariner redhat Yes CVE-2026-19617 Allocation of Resources Without Limits or Throttling 21736-17084 21736-17084 Moderate 21736-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21736-17084 Release Notes 21736-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21736-17084 Release Notes 1.0 2026-08-20T22:03:02 <p>Information published.</p> 2.0 2026-09-25T02:32:11 <p>Information published.</p> Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd Mariner redhat Yes CVE-2026-19654 Out-of-bounds Read 21838-17084 21838-17084 Moderate 21838-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21838-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21838-17084 Security Update 8.2308.0-6 21838-17084 1.0 2026-09-09T15:00:48 <p>Information published.</p> 2.0 2026-09-13T01:48:25 <p>Information published.</p> tarfile extraction filter bypass allows creation of directories outside the destination Mariner PSF Yes CVE-2026-19672 21694-17084 21897-17084 21811-17084 21694-17084 21897-17084 21811-17084 Moderate 21694-17084 Moderate 21897-17084 Moderate 21811-17084 Release Notes 21897-17084 Security Update 3.12.14-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21897-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21811-17084 Security Update 3.12.14-2 21811-17084 8.0 2026-10-23T01:16:49 <p>Information published.</p> 7.0 2026-10-02T02:55:23 <p>Information published.</p> 1.0 2026-08-23T01:04:29 <p>Information published.</p> 2.0 2026-08-24T14:44:53 <p>Information published.</p> 3.0 2026-09-09T14:44:40 <p>Information published.</p> 4.0 2026-09-11T01:44:34 <p>Information published.</p> 5.0 2026-09-23T02:20:20 <p>Information published.</p> 6.0 2026-09-25T02:35:46 <p>Information published.</p> 9.0 2026-10-23T14:43:53 <p>Information published.</p> 10.0 2026-10-28T01:48:49 <p>Information published.</p> URI versions before 5.36 for Perl encode non-NFC host names to non-standard punycode labels via missing normalization in nameprep Mariner CPANSec Yes CVE-2026-19953 Improper Validation of Unsafe Equivalence in Input 21781-17084 21919-17084 21781-17084 21919-17084 Moderate 21781-17084 Moderate 21919-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U 21781-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U 21919-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21781-17084 Security Update 5.21-3 21781-17084 Release Notes 21919-17084 Security Update 5.21-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21919-17084 Release Notes 5.0 2026-10-02T01:50:31 <p>Information published.</p> 2.0 2026-09-17T01:51:46 <p>Information published.</p> 3.0 2026-09-23T02:40:19 <p>Information published.</p> 1.0 2026-09-03T01:09:27 <p>Information published.</p> 4.0 2026-09-24T02:12:14 <p>Information published.</p> ClamAV ZIP File Format Processing Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20337 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:52 <p>Information published.</p> 2.0 2026-08-23T14:49:27 <p>Information published.</p> ClamAV ZIP File Format Processing Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20338 Double Free 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:59 <p>Information published.</p> 2.0 2026-08-23T14:49:44 <p>Information published.</p> ClamAV PESpin File Format Processing Integer Overflow Vulnerability Mariner cisco Yes CVE-2026-20339 Integer Overflow or Wraparound 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:46 <p>Information published.</p> 2.0 2026-08-23T14:49:09 <p>Information published.</p> ClamAV GPT File Format Processing Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20345 Stack-based Buffer Overflow 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:25 <p>Information published.</p> 2.0 2026-08-23T14:48:11 <p>Information published.</p> ClamAV PDF File Format Processing Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20346 Out-of-bounds Read 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 2.0 2026-08-23T14:48:51 <p>Information published.</p> 1.0 2026-08-11T01:17:39 <p>Information published.</p> ClamAV Mach-O File Format Processing Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20347 Out-of-bounds Read 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:32 <p>Information published.</p> 2.0 2026-08-23T14:48:29 <p>Information published.</p> ClamAV XAR File Format Processing Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20348 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21699-17084 21699-17084 Important 21699-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21699-17084 CBL-Mariner Releases 21699-17084 No Security Update 1.5.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21699-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:18 <p>Information published.</p> 2.0 2026-08-23T14:47:52 <p>Information published.</p> Apache Portable Runtime Utility: apr-util XML stack recursion crash Mariner apache Yes CVE-2026-32327 Uncontrolled Recursion 21667-17084 21667-17084 Moderate 21667-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21667-17084 CBL-Mariner Releases 21667-17084 No Security Update 1.6.3-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21667-17084 CBL-Mariner Releases 1.0 2026-08-07T01:10:27 <p>Information published.</p> 2.0 2026-08-23T14:43:04 <p>Information published.</p> Enforce maximum recursion depth in encoding/asn1 Mariner Go Yes CVE-2026-33818 Uncontrolled Resource Consumption 21660-17084 21676-17084 21859-17084 21660-17084 21676-17084 21859-17084 Moderate 21660-17084 Important 21676-17084 Important 21859-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21660-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21676-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21859-17084 Release Notes 21859-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21859-17084 Release Notes 1.0 2026-08-20T22:02:55 <p>Information published.</p> 2.0 2026-09-09T15:03:49 <p>Information published.</p> 3.0 2026-09-24T02:39:08 <p>Information published.</p> Apache Portable Runtime Utility: Heap buffer overflow in APR redis client Mariner apache Yes CVE-2026-34501 Heap-based Buffer Overflow 21667-17084 21667-17084 Important 21667-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21667-17084 CBL-Mariner Releases 21667-17084 No Security Update 1.6.3-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21667-17084 CBL-Mariner Releases 2.0 2026-08-10T14:42:47 <p>Information published.</p> 1.0 2026-08-09T01:02:27 <p>Information published.</p> 3.0 2026-08-23T14:44:41 <p>Information published.</p> Apache Portable Runtime Utility: Heap buffer overflow in APR memcached client Mariner apache Yes CVE-2026-34502 Heap-based Buffer Overflow 21667-17084 21667-17084 Important 21667-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21667-17084 CBL-Mariner Releases 21667-17084 No Security Update 1.6.3-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21667-17084 CBL-Mariner Releases 2.0 2026-08-10T14:42:57 <p>Information published.</p> 1.0 2026-08-09T01:02:34 <p>Information published.</p> 3.0 2026-08-23T14:45:00 <p>Information published.</p> grpc-gateway v2.28.0 is vulnerable to Incorrect Access Control. The application processes the X-HTTP-Method-Override header in ServeMux.ServeHTTP without restricting allowed methods. When a POST request with Content-Type application/x-www-form-urlencoded includes this header, the request method is rewritten to an arbitrary attacker-supplied value before routing. This allows bypassing method-based access controls enforced by upstream proxies or WAFs. Mariner mitre Yes CVE-2026-37236 21688-17084 21768-17084 21744-17084 21743-17084 21682-17084 21771-17084 21745-17084 21741-17084 21746-17084 21705-17084 21693-17084 21828-17084 21831-17084 21833-17084 21807-17084 21834-17084 21907-17084 21912-17084 21913-17084 21769-17084 21770-17084 21652-17084 21691-17084 21747-17084 21826-17084 21827-17084 21830-17084 21832-17084 21836-17084 21908-17084 21909-17084 21910-17084 21911-17084 21904-17084 21893-17084 21914-17084 21688-17084 21768-17084 21744-17084 21743-17084 21682-17084 21771-17084 21745-17084 21741-17084 21746-17084 21705-17084 21693-17084 21828-17084 21831-17084 21833-17084 21807-17084 21834-17084 21907-17084 21912-17084 21913-17084 21769-17084 21770-17084 21652-17084 21691-17084 21747-17084 21826-17084 21827-17084 21830-17084 21832-17084 21836-17084 21908-17084 21909-17084 21910-17084 21911-17084 21904-17084 21893-17084 21914-17084 Moderate 21688-17084 Moderate 21768-17084 Moderate 21744-17084 Moderate 21743-17084 Moderate 21682-17084 Moderate 21771-17084 Moderate 21745-17084 Moderate 21741-17084 Moderate 21746-17084 Moderate 21705-17084 Moderate 21693-17084 Moderate 21828-17084 Moderate 21831-17084 Moderate 21833-17084 Moderate 21807-17084 Moderate 21834-17084 Moderate 21907-17084 Moderate 21912-17084 Moderate 21913-17084 Moderate 21769-17084 Moderate 21770-17084 Moderate 21652-17084 Moderate 21691-17084 Moderate 21747-17084 Moderate 21826-17084 Moderate 21827-17084 Moderate 21830-17084 Moderate 21832-17084 Moderate 21836-17084 Moderate 21908-17084 Moderate 21909-17084 Moderate 21910-17084 Moderate 21911-17084 Moderate 21904-17084 Moderate 21893-17084 Moderate 21914-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21688-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21768-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21744-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21743-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21682-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21771-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21745-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21741-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21746-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21705-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21693-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21828-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21831-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21833-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21807-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21834-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21907-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21912-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21913-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21769-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21770-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21652-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21691-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21747-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21826-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21827-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21830-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21832-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21836-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21908-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21909-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21910-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21911-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21904-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21893-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21914-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21688-17084 21744-17084 21745-17084 21741-17084 21746-17084 21693-17084 21769-17084 21652-17084 21691-17084 21747-17084 Security Update 21688-17084 21744-17084 21745-17084 21741-17084 21746-17084 21693-17084 21769-17084 21652-17084 21691-17084 21747-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21768-17084 Security Update 8.7.11-9 21768-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21743-17084 Security Update 0.14.0-17 21743-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21682-17084 Security Update 2.27.0-14 21682-17084 Release Notes 21771-17084 Security Update 3.5.35-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21771-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21705-17084 Security Update 1.7.7-17 21705-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21828-17084 Security Update 2.2.4-9 21828-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21831-17084 21904-17084 Security Update 2.14.1-19 21831-17084 21904-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21833-17084 Security Update 0.0.10-10 21833-17084 Release Notes 21807-17084 Security Update 25.0.3-21 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21807-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21834-17084 Security Update 0.12.0-10 21834-17084 Release Notes 21907-17084 Security Update 8.7.11-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21907-17084 Release Notes Release Notes 21912-17084 Security Update 0.24.2-32 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21912-17084 Release Notes Release Notes 21913-17084 Security Update 1.7.7-17 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21913-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21770-17084 Security Update 1.32.0-8 21770-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21826-17084 Security Update 1.12.15-14 21826-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21827-17084 Security Update 0.5.1-9 21827-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21830-17084 Security Update 0.24.2-32 21830-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21832-17084 Security Update 1.30.10-30 21832-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21836-17084 Security Update 1.31.0-33 21836-17084 Release Notes 21908-17084 Security Update 2.3.4-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21908-17084 Release Notes Release Notes 21909-17084 Security Update 1.32.0-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21909-17084 Release Notes Release Notes 21910-17084 Security Update 0.14.0-17 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21910-17084 Release Notes Release Notes 21911-17084 Security Update 2.27.0-14 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21911-17084 Release Notes Release Notes 21893-17084 Security Update 1.30.10-30 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21893-17084 Release Notes Release Notes 21914-17084 Security Update 0.12.0-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21914-17084 Release Notes 15.0 2026-10-02T04:12:52 <p>Information published.</p> 16.0 2026-10-07T14:45:25 <p>Information published.</p> 1.0 2026-09-02T01:04:47 <p>Information published.</p> 2.0 2026-09-07T01:54:00 <p>Information published.</p> 4.0 2026-09-09T01:53:46 <p>Information published.</p> 11.0 2026-09-19T01:56:11 <p>Information published.</p> 12.0 2026-09-23T02:37:34 <p>Information published.</p> 13.0 2026-09-24T15:05:41 <p>Information published.</p> 14.0 2026-09-25T02:33:26 <p>Information published.</p> 3.0 2026-09-08T14:46:01 <p>Information published.</p> 5.0 2026-09-09T14:49:36 <p>Information published.</p> 6.0 2026-09-11T01:58:57 <p>Information published.</p> 7.0 2026-09-13T14:52:28 <p>Information published.</p> 8.0 2026-09-15T14:45:05 <p>Information published.</p> 9.0 2026-09-17T01:51:36 <p>Information published.</p> 10.0 2026-09-18T14:50:10 <p>Information published.</p> 17.0 2026-10-10T01:47:06 <p>Information published.</p> 18.0 2026-10-24T14:44:58 <p>Information published.</p> 19.0 2026-10-25T01:44:44 <p>Information published.</p> Link Header Directive Smuggling via Unescaped target/rel/Attribute Keys in cow_link:link/1 Mariner EEF Yes CVE-2026-43971 Improper Encoding or Escaping of Output 21657-17084 21829-17084 21657-17084 21829-17084 Moderate 21657-17084 Moderate 21829-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21829-17084 Security Update 3.13.7-9 21829-17084 1.0 2026-08-21T14:03:12 <p>Information published.</p> 2.0 2026-09-09T15:05:04 <p>Information published.</p> 3.0 2026-09-13T01:49:00 <p>Information published.</p> Rpm: heap buffer overflow in ndb slot table parsing Mariner redhat Yes CVE-2026-44605 Integer Overflow or Wraparound 21686-17084 21847-17084 21686-17084 21847-17084 Moderate 21686-17084 Moderate 21847-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21686-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21847-17084 CBL-Mariner Releases 21686-17084 No Security Update 4.18.2-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21686-17084 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21847-17084 Security Update 4.18.2-2 21847-17084 1.0 2026-08-09T01:03:34 <p>Information published.</p> 3.0 2026-08-13T00:08:56 <p>Information published.</p> 4.0 2026-09-09T14:55:42 <p>Information published.</p> 2.0 2026-08-10T14:44:24 <p>Information published.</p> 5.0 2026-09-13T01:46:36 <p>Information published.</p> Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs Mariner GitHub_M Yes CVE-2026-47243 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21683-17084 21683-17084 Critical 21683-17084 CBL-Mariner Releases 21683-17084 No Security Update 3.32.0.kata0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21683-17084 CBL-Mariner Releases 1.0 2026-08-09T01:02:08 <p>Information published.</p> 3.0 2026-08-14T17:59:59 <p>Information published.</p> 2.0 2026-08-10T14:42:17 <p>Information published.</p> 3.0 2026-08-14T17:59:57 <p>Information published.</p> 4.0 2026-08-14T18:00:01 <p>Information published.</p> In strongSwan before 6.0.7, identity parsing/cloning is mishandled. Parsed EAP-Identities that result in an empty but non-NULL encoding are not correctly cloned and trigger a double-free once the duplicates are destroyed. Mariner mitre Yes CVE-2026-47895 Double Free 21751-17084 21751-17084 Important 21751-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21751-17084 2.0 2026-08-24T14:47:08 <p>Information published.</p> 1.0 2026-08-24T01:02:40 <p>Information published.</p> ONNX symlink-following and path-traversal arbitrary file write Mariner cisa-cg Yes CVE-2026-49114 Time-of-check Time-of-use (TOCTOU) Race Condition 21646-17084 21646-17084 Moderate 21646-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21646-17084 1.0 2026-08-25T01:07:18 <p>Information published.</p> lxml: javascript: URL bypass in Cleaner via xlink:href Mariner GitHub_M Yes CVE-2026-49825 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21313-17084 21313-17084 Important 21313-17084 8.2 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U 21313-17084 1.0 2026-08-21T14:02:34 <p>Information published.</p> Kata Containers: Config Path Annotation Arbitrary File Loading Mariner GitHub_M Yes CVE-2026-50540 Improper Input Validation 21655-17084 21674-17084 21655-17084 21674-17084 Critical 21655-17084 Critical 21674-17084 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 21655-17084 9.6 9.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N 21674-17084 CBL-Mariner Releases 21655-17084 No Security Update 3.32.0.kata0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21655-17084 CBL-Mariner Releases 2.0 2026-08-10T14:41:43 <p>Information published.</p> 1.0 2026-08-09T01:01:47 <p>Information published.</p> 3.0 2026-08-23T14:44:01 <p>Information published.</p> An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the process_command_opts() function in tools/tiffcrop.c Mariner mitre Yes CVE-2026-52490 Improper Control of Generation of Code ('Code Injection') 21762-17084 21762-17084 Critical 21762-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21762-17084 1.0 2026-08-27T01:13:21 <p>Information published.</p> KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping Mariner GitHub_M Yes CVE-2026-53572 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') 21741-17084 21904-17084 21831-17084 21741-17084 21904-17084 21831-17084 Moderate 21741-17084 Moderate 21904-17084 Moderate 21831-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N 21741-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N 21904-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N 21831-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21741-17084 21831-17084 Security Update 21741-17084 21831-17084 Release Notes 21904-17084 Security Update 2.14.1-22 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21904-17084 Release Notes 8.0 2026-10-18T01:47:30 <p>Information published.</p> 1.0 2026-08-23T01:03:01 <p>Information published.</p> 2.0 2026-08-24T14:43:43 <p>Information published.</p> 3.0 2026-09-06T04:37:08 <p>Information published.</p> 4.0 2026-09-09T15:05:36 <p>Information published.</p> 5.0 2026-09-23T02:20:00 <p>Information published.</p> 6.0 2026-09-24T02:00:15 <p>Information published.</p> 7.0 2026-10-17T14:50:19 <p>Information published.</p> libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend Mariner GitHub_M Yes CVE-2026-53583 Improper Certificate Validation 21716-17084 19847-17084 21500-17084 21716-17084 19847-17084 21500-17084 Moderate 21716-17084 Moderate 19847-17084 Moderate 21500-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21716-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 19847-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21500-17084 1.0 2026-08-22T01:04:06 <p>Information published.</p> 2.0 2026-08-25T01:07:44 <p>Information published.</p> libgit2: Submodule path traversal Mariner GitHub_M Yes CVE-2026-53584 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 19847-17084 21500-17084 21716-17084 19847-17084 21500-17084 21716-17084 Moderate 19847-17084 Moderate 21500-17084 Moderate 21716-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 19847-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 21500-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 21716-17084 1.0 2026-08-22T01:04:13 <p>Information published.</p> 2.0 2026-08-25T01:07:26 <p>Information published.</p> rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync Mariner VulnCheck Yes CVE-2026-53783 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Important 21597-17084 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:46:43 <p>Information published.</p> rsync < 3.5.0 Path Traversal via Symlink Module Root Mariner VulnCheck Yes CVE-2026-53784 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Important 21597-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:49:23 <p>Information published.</p> rsync < 3.5.0 Path Traversal Write Escape via --relative Mode Mariner VulnCheck Yes CVE-2026-53785 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Important 21597-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21597-17084 1.0 2026-08-23T14:45:38 <p>Information published.</p> rsync < 3.5.0 Filter Rule Bypass via --filter Merge Directive Mariner VulnCheck Yes CVE-2026-53786 Incorrect Authorization 21597-17084 21597-17084 Moderate 21597-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21597-17084 1.0 2026-08-23T14:46:27 <p>Information published.</p> rsync < 3.5.0 Newline Injection via name-converter uid/gid mapping Mariner VulnCheck Yes CVE-2026-53788 Improper Neutralization of CRLF Sequences ('CRLF Injection') 21597-17084 21597-17084 Moderate 21597-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21597-17084 1.0 2026-08-23T14:46:10 <p>Information published.</p> rsync < 3.5.0 Arbitrary File Deletion via Malicious File List Mariner VulnCheck Yes CVE-2026-53789 Reliance on Untrusted Inputs in a Security Decision 21597-17084 21597-17084 Moderate 21597-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21597-17084 1.0 2026-08-23T15:04:02 <p>Information published.</p> rsync < 3.5.0 Command Injection via Multiple Code Paths Mariner VulnCheck Yes CVE-2026-53790 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 21597-17084 21597-17084 Important 21597-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21597-17084 1.0 2026-08-23T14:47:37 <p>Information published.</p> rsync < 3.5.0 Daemon IP Spoofing via PROXY Protocol Header Mariner VulnCheck Yes CVE-2026-53791 Authentication Bypass by Spoofing 21597-17084 21597-17084 Critical 21597-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:42:54 <p>Information published.</p> rsync < 3.5.0 Out-of-Bounds Read via Zero-Length Checksum Block Mariner VulnCheck Yes CVE-2026-53792 Improper Validation of Array Index 21597-17084 21597-17084 Moderate 21597-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21597-17084 1.0 2026-08-23T14:43:09 <p>Information published.</p> rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode Mariner VulnCheck Yes CVE-2026-53793 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Important 21597-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:44:16 <p>Information published.</p> rsync < 3.5.0 Denial of Service via --max-alloc=0 Logic Error Mariner VulnCheck Yes CVE-2026-53794 Improper Validation of Specified Quantity in Input 21597-17084 21597-17084 Moderate 21597-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21597-17084 1.0 2026-08-23T14:47:54 <p>Information published.</p> rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest Mariner VulnCheck Yes CVE-2026-53795 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Important 21597-17084 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21597-17084 1.0 2026-08-23T14:42:05 <p>Information published.</p> rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling Mariner VulnCheck Yes CVE-2026-53796 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Moderate 21597-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21597-17084 1.0 2026-08-23T14:45:53 <p>Information published.</p> rsync < 3.5.0 Symlink Race Condition Information Disclosure Mariner VulnCheck Yes CVE-2026-53797 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Moderate 21597-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21597-17084 1.0 2026-08-23T14:42:38 <p>Information published.</p> rsync < 3.5.0 Privilege Confusion via name-converter uid/gid mapping Mariner VulnCheck Yes CVE-2026-53798 Incorrect Type Conversion or Cast 21597-17084 21597-17084 Moderate 21597-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N 21597-17084 1.0 2026-08-23T14:44:49 <p>Information published.</p> rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application Mariner VulnCheck Yes CVE-2026-53799 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Moderate 21597-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:49:08 <p>Information published.</p> rsync < 3.5.0 Symlink Race Condition via --remove-source-files Mariner VulnCheck Yes CVE-2026-53800 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Moderate 21597-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21597-17084 1.0 2026-08-23T15:04:17 <p>Information published.</p> rsync < 3.5.0 Symlink Race Condition Directory Traversal Mariner VulnCheck Yes CVE-2026-53801 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Moderate 21597-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21597-17084 1.0 2026-08-23T14:43:25 <p>Information published.</p> rsync < 3.5.0 Arbitrary File Read via Symlink Following Mariner VulnCheck Yes CVE-2026-53802 UNIX Symbolic Link (Symlink) Following 21597-17084 21597-17084 Important 21597-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:45:22 <p>Information published.</p> rsync < 3.5.0 Symlink Following Arbitrary File Overwrite Mariner VulnCheck Yes CVE-2026-53803 Improper Link Resolution Before File Access ('Link Following') 21597-17084 21597-17084 Important 21597-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21597-17084 1.0 2026-08-23T15:04:24 <p>Information published.</p> Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation Mariner GitHub_M Yes CVE-2026-54330 Improper Verification of Cryptographic Signature 20730-17084 20730-17084 Important 20730-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U 20730-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 20730-17084 Security Update 18.2.2-13 20730-17084 1.0 2026-09-02T01:03:35 <p>Information published.</p> 2.0 2026-09-06T04:58:02 <p>Information published.</p> 4.0 2026-09-20T01:52:51 <p>Information published.</p> 3.0 2026-09-19T14:49:37 <p>Information published.</p> WebOb: Open redirect in Location header normalization via leading C0 control / space characters Mariner GitHub_M Yes CVE-2026-54770 URL Redirection to Untrusted Site ('Open Redirect') 21757-17084 21757-17084 Moderate 21757-17084 6.1 5.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U 21757-17084 1.0 2026-08-25T01:07:11 <p>Information published.</p> Excessive Memory Use Buffering DTLS Records for a Future Epoch Mariner openssl Yes CVE-2026-54874 Asymmetric Resource Consumption (Amplification) 21748-17084 21655-17084 21643-17084 21819-17084 21734-17084 21761-17084 21500-17084 21716-17084 21748-17084 21655-17084 21643-17084 21819-17084 21734-17084 21761-17084 21500-17084 21716-17084 Moderate 21748-17084 Important 21655-17084 Important 21643-17084 Moderate 21819-17084 Important 21734-17084 Moderate 21761-17084 Important 21500-17084 Important 21716-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21748-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21655-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21643-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21819-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21734-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21761-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21819-17084 21761-17084 Security Update 3.3.7-6 21819-17084 21761-17084 1.0 2026-08-27T01:10:19 <p>Information published.</p> 4.0 2026-09-09T01:52:01 <p>Information published.</p> 5.0 2026-09-09T14:47:29 <p>Information published.</p> 6.0 2026-09-13T01:50:59 <p>Information published.</p> 2.0 2026-09-04T01:03:40 <p>Information published.</p> 3.0 2026-09-06T04:38:01 <p>Information published.</p> eml_parser: URL extraction bypass via HTML entities in URLs Mariner GitHub_M Yes CVE-2026-55618 Improper Encoding or Escaping of Output 21365-17084 21365-17084 Moderate 21365-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N 21365-17084 1.0 2026-08-27T01:02:41 <p>Information published.</p> eml_parser: Parser DoS via deeply nested parentheses in e-mail headers Mariner GitHub_M Yes CVE-2026-55619 Allocation of Resources Without Limits or Throttling 21365-17084 21365-17084 Moderate 21365-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21365-17084 1.0 2026-08-27T01:02:55 <p>Information published.</p> eml_parser: DoS via deeply nested parens in Received headers Mariner GitHub_M Yes CVE-2026-55620 Allocation of Resources Without Limits or Throttling 21365-17084 21365-17084 Important 21365-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21365-17084 1.0 2026-08-27T01:02:48 <p>Information published.</p> Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode Mariner GitHub_M Yes CVE-2026-55893 Heap-based Buffer Overflow 21500-17084 21500-17084 Important 21500-17084 2.0 2026-09-09T01:51:24 <p>Information published.</p> 1.0 2026-08-25T01:03:03 <p>Information published.</p> Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode Mariner GitHub_M Yes CVE-2026-55894 Out-of-bounds Read 21500-17084 21500-17084 Moderate 21500-17084 2.0 2026-09-09T01:51:16 <p>Information published.</p> 1.0 2026-08-25T01:02:53 <p>Information published.</p> In NTFS-3G through 2026.2.25, a heap-based buffer overflow exists in the function build_inherited_id() in libntfs-3g/security.c that allows an attacker to corrupt heap memory in the SUID-root ntfs-3g binary by crafting a malicious NTFS image. The overflow is triggered by creating a file in a crafted directory. Mariner mitre Yes CVE-2026-56135 21822-17084 21763-17084 21822-17084 21763-17084 Moderate 21822-17084 Moderate 21763-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21822-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21763-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21822-17084 Security Update 2022.10.3-4 21822-17084 1.0 2026-08-27T01:13:35 <p>Information published.</p> 3.0 2026-09-13T01:50:04 <p>Information published.</p> 2.0 2026-09-09T14:47:00 <p>Information published.</p> In NTFS-3G through 2026.2.25, an out-of-bounds read exists in ntfs_ir_nill() in libntfs-3g/index.c that allows an attacker to read possibly confidential information in an ntfs-3g process by crafting a malicious NTFS image. This read operation is triggered by creation of a file with a crafted name. Mariner mitre Yes CVE-2026-56136 21763-17084 21822-17084 21763-17084 21822-17084 Moderate 21763-17084 Moderate 21822-17084 7.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U 21763-17084 7.1 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U 21822-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21822-17084 Security Update 2022.10.3-4 21822-17084 3.0 2026-09-13T01:49:57 <p>Information published.</p> 1.0 2026-08-27T01:13:29 <p>Information published.</p> 2.0 2026-09-09T14:46:51 <p>Information published.</p> Valkey: TLS pending-data processing use-after-free may allow remote code execution Mariner GitHub_M Yes CVE-2026-56684 Use After Free 21628-17084 21628-17084 Important 21628-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21628-17084 1.0 2026-08-21T14:03:32 <p>Information published.</p> Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http Mariner Go Yes CVE-2026-56853 Allocation of Resources Without Limits or Throttling 21660-17084 21676-17084 19693-17084 21021-17084 21778-17084 21857-17084 21660-17084 21676-17084 19693-17084 21021-17084 21778-17084 21857-17084 Moderate 21660-17084 Moderate 21676-17084 Important 19693-17084 Important 21021-17084 Important 21778-17084 Moderate 21857-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21660-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21676-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21857-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 21857-17084 Security Update 21778-17084 21857-17084 1.0 2026-08-20T22:02:35 <p>Information published.</p> 2.0 2026-09-03T01:11:24 <p>Information published.</p> 3.0 2026-09-08T14:48:26 <p>Information published.</p> 4.0 2026-09-09T15:03:21 <p>Information published.</p> 5.0 2026-09-17T01:53:26 <p>Information published.</p> Fix Javascript regexp context tracking in html/template Mariner Go Yes CVE-2026-56858 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21778-17084 21857-17084 21660-17084 21676-17084 21778-17084 21857-17084 21660-17084 21676-17084 Moderate 21778-17084 Moderate 21857-17084 Moderate 21660-17084 Moderate 21676-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21778-17084 6.1 5.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U 21857-17084 6.1 5.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U 21660-17084 6.1 5.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U 21676-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 21857-17084 Security Update 21778-17084 21857-17084 1.0 2026-08-20T22:02:44 <p>Information published.</p> 5.0 2026-09-17T01:54:55 <p>Information published.</p> 2.0 2026-09-03T01:11:32 <p>Information published.</p> 3.0 2026-09-08T14:49:31 <p>Information published.</p> 4.0 2026-09-09T15:02:44 <p>Information published.</p> Add recursion depth guard during decode in encoding/xml Mariner Go Yes CVE-2026-56859 Allocation of Resources Without Limits or Throttling 18315-17084 21660-17084 21676-17084 19693-17084 21021-17084 21778-17084 21857-17084 18315-17084 21660-17084 21676-17084 19693-17084 21021-17084 21778-17084 21857-17084 Important 18315-17084 Moderate 21660-17084 Moderate 21676-17084 Important 19693-17084 Important 21021-17084 Important 21778-17084 Moderate 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18315-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21660-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21676-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21857-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 21857-17084 Security Update 21778-17084 21857-17084 1.0 2026-08-20T22:01:58 <p>Information published.</p> 2.0 2026-09-03T01:12:15 <p>Information published.</p> 3.0 2026-09-07T01:48:05 <p>Information published.</p> 5.0 2026-09-17T01:54:17 <p>Information published.</p> 4.0 2026-09-09T15:03:06 <p>Information published.</p> 6.0 2026-10-22T01:11:37 <p>Information published.</p> Avoid quadratic complexity in resolvePath in net/url Mariner Go Yes CVE-2026-56860 Inefficient Algorithmic Complexity 18315-17084 21660-17084 21676-17084 19693-17084 21021-17084 21863-17084 21778-17084 21857-17084 18315-17084 21660-17084 21676-17084 19693-17084 21021-17084 21863-17084 21778-17084 21857-17084 Moderate 18315-17084 Moderate 21660-17084 Moderate 21676-17084 Moderate 19693-17084 Moderate 21021-17084 Moderate 21863-17084 Moderate 21778-17084 Moderate 21857-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 18315-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21660-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21676-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21021-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21863-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 5.9 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21857-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21863-17084 21778-17084 Security Update 21863-17084 21778-17084 Release Notes 21857-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 Release Notes 1.0 2026-08-20T22:01:37 <p>Information published.</p> 3.0 2026-09-07T01:52:24 <p>Information published.</p> 5.0 2026-09-10T14:44:10 <p>Information published.</p> 7.0 2026-09-25T02:30:31 <p>Information published.</p> 2.0 2026-09-03T01:14:41 <p>Information published.</p> 4.0 2026-09-09T15:01:48 <p>Information published.</p> 6.0 2026-09-17T01:46:15 <p>Information published.</p> 8.0 2026-10-22T01:11:40 <p>Information published.</p> Limit handshake messages we are willing to accept post-handshake in crypto/tls Mariner Go Yes CVE-2026-56862 Allocation of Resources Without Limits or Throttling 19693-17084 21021-17084 18315-17084 21660-17084 21676-17084 21778-17084 21857-17084 19693-17084 21021-17084 18315-17084 21660-17084 21676-17084 21778-17084 21857-17084 Important 19693-17084 Important 21021-17084 Important 18315-17084 Important 21660-17084 Moderate 21676-17084 Important 21778-17084 Moderate 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 18315-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21660-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21676-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21778-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21857-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 21857-17084 Security Update 21778-17084 21857-17084 1.0 2026-08-20T22:01:18 <p>Information published.</p> 3.0 2026-09-07T01:46:49 <p>Information published.</p> 5.0 2026-09-17T01:53:34 <p>Information published.</p> 2.0 2026-09-03T01:11:30 <p>Information published.</p> 4.0 2026-09-09T15:02:06 <p>Information published.</p> 6.0 2026-10-22T01:11:44 <p>Information published.</p> Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb Mariner Go Yes CVE-2026-56864 Improper Verification of Cryptographic Signature 21660-17084 21676-17084 21021-17084 21857-17084 21778-17084 21660-17084 21676-17084 21021-17084 21857-17084 21778-17084 Moderate 21660-17084 Moderate 21676-17084 Important 21021-17084 Moderate 21857-17084 Important 21778-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U 21660-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U 21676-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21021-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U 21857-17084 7.5 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21778-17084 Release Notes 21857-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 Security Update 21778-17084 3.0 2026-09-07T01:44:39 <p>Information published.</p> 6.0 2026-09-25T02:31:03 <p>Information published.</p> 1.0 2026-08-20T22:00:59 <p>Information published.</p> 2.0 2026-09-03T01:10:13 <p>Information published.</p> 4.0 2026-09-09T15:02:23 <p>Information published.</p> 5.0 2026-09-17T01:52:14 <p>Information published.</p> 7.0 2026-10-22T01:11:51 <p>Information published.</p> Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog Mariner Go Yes CVE-2026-56865 Improper Verification of Cryptographic Signature 21660-17084 21676-17084 21778-17084 21857-17084 21660-17084 21676-17084 21778-17084 21857-17084 Important 21660-17084 Important 21676-17084 Important 21778-17084 Important 21857-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21660-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21676-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21778-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21857-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21778-17084 Security Update 21778-17084 Release Notes 21857-17084 Security Update 1.26.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21857-17084 Release Notes 1.0 2026-08-20T22:00:40 <p>Information published.</p> 3.0 2026-09-05T01:59:37 <p>Information published.</p> 2.0 2026-09-03T01:15:14 <p>Information published.</p> 4.0 2026-09-09T15:03:37 <p>Information published.</p> 5.0 2026-09-17T01:46:48 <p>Information published.</p> 6.0 2026-09-24T02:38:48 <p>Information published.</p> 7.0 2026-10-22T01:11:57 <p>Information published.</p> Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vect Mariner oracle Yes CVE-2026-60589 Exposure of Sensitive Information to an Unauthorized Actor 19693-17084 19693-17084 Low 19693-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 19693-17084 1.0 2026-08-21T14:02:46 <p>Information published.</p> Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection Mariner redhat Yes CVE-2026-61477 Improper Neutralization of CRLF Sequences ('CRLF Injection') 21695-17084 21695-17084 Low 21695-17084 2.3 2.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:U 21695-17084 CBL-Mariner Releases 21695-17084 No Security Update 10.10.0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21695-17084 CBL-Mariner Releases 2.0 2026-08-14T18:36:17 <p>Information published.</p> 1.0 2026-08-11T01:03:33 <p>Information published.</p> 2.0 2026-08-14T18:36:24 <p>Information published.</p> 3.0 2026-08-23T14:51:34 <p>Information published.</p> BuildKit: Custom frontend could bypass Seccomp/AppArmor Mariner GitHub_M Yes CVE-2026-61711 Improper Input Validation 21743-17084 21682-17084 21691-17084 21807-17084 21743-17084 21682-17084 21691-17084 21807-17084 Moderate 21743-17084 Moderate 21682-17084 Moderate 21691-17084 Moderate 21807-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21691-17084 21807-17084 Security Update 25.0.3-20 21691-17084 21807-17084 1.0 2026-08-23T01:04:11 <p>Information published.</p> 3.0 2026-09-08T01:52:15 <p>Information published.</p> 4.0 2026-09-09T15:06:06 <p>Information published.</p> 2.0 2026-08-24T14:44:29 <p>Information published.</p> 5.0 2026-09-10T03:34:47 <p>Information published.</p> BuildKit: Possible runtime DoS via unbounded group parsing Mariner GitHub_M Yes CVE-2026-61712 Allocation of Resources Without Limits or Throttling 21691-17084 21807-17084 21691-17084 21807-17084 Low 21691-17084 Low 21807-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21691-17084 21807-17084 Security Update 25.0.3-20 21691-17084 21807-17084 1.0 2026-08-23T01:04:17 <p>Information published.</p> 2.0 2026-08-24T14:44:41 <p>Information published.</p> 3.0 2026-09-07T01:47:58 <p>Information published.</p> 4.0 2026-09-08T01:52:08 <p>Information published.</p> 5.0 2026-09-09T15:05:58 <p>Information published.</p> 6.0 2026-09-10T03:34:38 <p>Information published.</p> Heap Buffer Overflow in CMS Key Unwrapping Mariner openssl Yes CVE-2026-63072 Out-of-bounds Write 21734-17084 21748-17084 21655-17084 21761-17084 21643-17084 21500-17084 21716-17084 21818-17084 21819-17084 21734-17084 21748-17084 21655-17084 21761-17084 21643-17084 21500-17084 21716-17084 21818-17084 21819-17084 Important 21734-17084 Moderate 21748-17084 Important 21655-17084 Moderate 21761-17084 Important 21643-17084 Important 21500-17084 Important 21716-17084 Moderate 21818-17084 Moderate 21819-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21734-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21748-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21655-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21761-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21643-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21818-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21819-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21748-17084 21818-17084 Security Update 20240524git3e722403cd16-19 21748-17084 21818-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21761-17084 21819-17084 Security Update 3.3.7-6 21761-17084 21819-17084 3.0 2026-09-06T04:37:42 <p>Information published.</p> 4.0 2026-09-08T01:53:03 <p>Information published.</p> 5.0 2026-09-09T01:45:22 <p>Information published.</p> 8.0 2026-09-13T01:50:44 <p>Information published.</p> 1.0 2026-08-27T01:13:08 <p>Information published.</p> 2.0 2026-09-04T01:03:18 <p>Information published.</p> 6.0 2026-09-09T14:46:37 <p>Information published.</p> 7.0 2026-09-10T03:24:47 <p>Information published.</p> Untrusted Sender DN Used as Format String in CMP Response Validation Mariner openssl Yes CVE-2026-63073 Use of Externally-Controlled Format String 21655-17084 21500-17084 21819-17084 21734-17084 21761-17084 21716-17084 21655-17084 21500-17084 21819-17084 21734-17084 21761-17084 21716-17084 Moderate 21655-17084 Moderate 21500-17084 Moderate 21819-17084 Moderate 21734-17084 Moderate 21761-17084 Moderate 21716-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21655-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21500-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21819-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21734-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21761-17084 7.4 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U 21716-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21819-17084 Security Update 3.3.7-6 21819-17084 3.0 2026-09-09T01:45:16 <p>Information published.</p> 1.0 2026-08-27T01:12:28 <p>Information published.</p> 2.0 2026-09-04T01:03:02 <p>Information published.</p> 4.0 2026-09-09T14:47:20 <p>Information published.</p> 5.0 2026-09-13T01:50:52 <p>Information published.</p> CMP Indefinite Cache Growth of ExtraCerts Mariner openssl Yes CVE-2026-63074 Allocation of Resources Without Limits or Throttling 21734-17084 21748-17084 21655-17084 21819-17084 21761-17084 21643-17084 21500-17084 21716-17084 21818-17084 21734-17084 21748-17084 21655-17084 21819-17084 21761-17084 21643-17084 21500-17084 21716-17084 21818-17084 Moderate 21734-17084 Moderate 21748-17084 Moderate 21655-17084 Moderate 21819-17084 Moderate 21761-17084 Moderate 21643-17084 Moderate 21500-17084 Moderate 21716-17084 Moderate 21818-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21734-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21748-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21655-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21819-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21761-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21643-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21818-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21748-17084 21818-17084 Security Update 20240524git3e722403cd16-19 21748-17084 21818-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21819-17084 21761-17084 Security Update 3.3.7-6 21819-17084 21761-17084 1.0 2026-08-27T01:11:34 <p>Information published.</p> 4.0 2026-09-08T01:52:34 <p>Information published.</p> 5.0 2026-09-09T01:51:51 <p>Information published.</p> 6.0 2026-09-09T14:45:52 <p>Information published.</p> 8.0 2026-09-13T01:50:36 <p>Information published.</p> 2.0 2026-09-04T01:03:10 <p>Information published.</p> 3.0 2026-09-06T04:37:52 <p>Information published.</p> 7.0 2026-09-10T03:35:25 <p>Information published.</p> QUIC ACK-only Packet Retention Can Cause Memory Exhaustion Mariner openssl Yes CVE-2026-63075 Allocation of Resources Without Limits or Throttling 21500-17084 21716-17084 21734-17084 21655-17084 21761-17084 21819-17084 21500-17084 21716-17084 21734-17084 21655-17084 21761-17084 21819-17084 Important 21500-17084 Important 21716-17084 Important 21734-17084 Important 21655-17084 Moderate 21761-17084 Moderate 21819-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21734-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21655-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21761-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21819-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21819-17084 Security Update 3.3.7-6 21819-17084 1.0 2026-08-27T01:11:03 <p>Information published.</p> 3.0 2026-09-09T01:45:28 <p>Information published.</p> 5.0 2026-09-13T01:50:21 <p>Information published.</p> 2.0 2026-09-04T01:03:25 <p>Information published.</p> 4.0 2026-09-09T14:47:11 <p>Information published.</p> Invalid Pointer Dereference in CMP Server via Crafted protectionAlg Mariner openssl Yes CVE-2026-63076 NULL Pointer Dereference 21819-17084 21734-17084 21748-17084 21655-17084 21761-17084 21643-17084 21500-17084 21716-17084 21818-17084 21819-17084 21734-17084 21748-17084 21655-17084 21761-17084 21643-17084 21500-17084 21716-17084 21818-17084 Important 21819-17084 Important 21734-17084 Important 21748-17084 Important 21655-17084 Important 21761-17084 Important 21643-17084 Important 21500-17084 Important 21716-17084 Important 21818-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21819-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21734-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21748-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21655-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21761-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21643-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21818-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21819-17084 Security Update 3.3.7-6 21819-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21748-17084 21818-17084 Security Update 20240524git3e722403cd16-19 21748-17084 21818-17084 4.0 2026-09-09T01:45:11 <p>Information published.</p> 7.0 2026-09-13T01:50:29 <p>Information published.</p> 1.0 2026-08-27T01:10:43 <p>Information published.</p> 2.0 2026-09-04T01:02:54 <p>Information published.</p> 3.0 2026-09-08T01:52:52 <p>Information published.</p> 5.0 2026-09-09T14:46:22 <p>Information published.</p> 6.0 2026-09-10T03:35:46 <p>Information published.</p> Libevent: HTTP Header smuggling Mariner GitHub_M Yes CVE-2026-63379 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21739-17084 21260-17084 21753-17084 21270-17084 21754-17084 21739-17084 21260-17084 21753-17084 21270-17084 21754-17084 Moderate 21739-17084 Moderate 21260-17084 Moderate 21753-17084 Moderate 21270-17084 Moderate 21754-17084 1.0 2026-08-22T01:03:02 <p>Information published.</p> 2.0 2026-08-25T01:04:40 <p>Information published.</p> Libevent: Dangling Pointer in `evbuffer_add_buffer_reference` Mariner GitHub_M Yes CVE-2026-63381 Use of Uninitialized Resource 21739-17084 21260-17084 21754-17084 21753-17084 21270-17084 21739-17084 21260-17084 21754-17084 21753-17084 21270-17084 Moderate 21739-17084 Moderate 21260-17084 Moderate 21754-17084 Moderate 21753-17084 Moderate 21270-17084 1.0 2026-08-22T01:03:27 <p>Information published.</p> 2.0 2026-08-25T01:05:42 <p>Information published.</p> Libevent: decode_tag_internal() can lead to out-of-bounds read Mariner GitHub_M Yes CVE-2026-63383 Out-of-bounds Read 21260-17084 21270-17084 21739-17084 21753-17084 21754-17084 21260-17084 21270-17084 21739-17084 21753-17084 21754-17084 Important 21260-17084 Important 21270-17084 Important 21739-17084 Important 21753-17084 Important 21754-17084 1.0 2026-08-22T01:02:55 <p>Information published.</p> 2.0 2026-08-25T01:06:13 <p>Information published.</p> Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value. Mariner GitHub_M Yes CVE-2026-63384 Integer Overflow or Wraparound 21270-17084 21755-17084 21739-17084 21260-17084 21753-17084 21754-17084 21270-17084 21755-17084 21739-17084 21260-17084 21753-17084 21754-17084 Moderate 21270-17084 Important 21755-17084 Important 21739-17084 Moderate 21260-17084 Important 21753-17084 Moderate 21754-17084 1.0 2026-08-22T01:02:49 <p>Information published.</p> 2.0 2026-08-25T01:04:25 <p>Information published.</p> Libevent: HTTP header handling bugs create risk of access control bypass. Mariner GitHub_M Yes CVE-2026-63385 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21739-17084 21753-17084 21260-17084 21270-17084 21754-17084 21739-17084 21753-17084 21260-17084 21270-17084 21754-17084 Critical 21739-17084 Critical 21753-17084 Important 21260-17084 Important 21270-17084 Important 21754-17084 1.0 2026-08-22T01:03:14 <p>Information published.</p> 2.0 2026-08-25T01:05:27 <p>Information published.</p> Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response Mariner GitHub_M Yes CVE-2026-63387 Stack-based Buffer Overflow 21260-17084 21739-17084 21753-17084 21270-17084 21754-17084 21260-17084 21739-17084 21753-17084 21270-17084 21754-17084 Moderate 21260-17084 Important 21739-17084 Important 21753-17084 Moderate 21270-17084 Moderate 21754-17084 7.0 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U 21260-17084 7.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21739-17084 7.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21753-17084 7.0 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U 21270-17084 7.0 6.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U 21754-17084 2.0 2026-08-25T01:05:57 <p>Information published.</p> 1.0 2026-08-22T01:03:20 <p>Information published.</p> Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept Mariner GitHub_M Yes CVE-2026-63388 Reachable Assertion 21739-17084 21260-17084 21753-17084 21270-17084 21754-17084 21755-17084 21739-17084 21260-17084 21753-17084 21270-17084 21754-17084 21755-17084 Important 21739-17084 Important 21260-17084 Important 21753-17084 Important 21270-17084 Important 21754-17084 Important 21755-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21739-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21260-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21753-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21270-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21754-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21755-17084 1.0 2026-08-22T01:03:33 <p>Information published.</p> 2.0 2026-08-25T01:05:12 <p>Information published.</p> Libvirt: information disclosure via world-readable storage volume images during clone/convert Mariner redhat Yes CVE-2026-63623 Incorrect Permission Assignment for Critical Resource 21695-17084 21695-17084 Moderate 21695-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21695-17084 CBL-Mariner Releases 21695-17084 No Security Update 10.10.0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21695-17084 CBL-Mariner Releases 1.0 2026-08-14T19:03:56 <p>Information published.</p> 2.0 2026-08-23T14:57:17 <p>Information published.</p> Valkey: UAF in stream deserialization may lead to remote code execution Mariner GitHub_M Yes CVE-2026-63639 Use After Free 21628-17084 21628-17084 Important 21628-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21628-17084 1.0 2026-08-21T14:03:26 <p>Information published.</p> wordexp with WRDE_APPEND can return or use invalid memory Mariner glibc Yes CVE-2026-6368 Use of Uninitialized Resource 21384-17084 21824-17084 21384-17084 21824-17084 Low 21384-17084 Low 21824-17084 Release Notes 21824-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21824-17084 Release Notes 1.0 2026-08-12T01:03:24 <p>Information published.</p> 3.0 2026-09-25T02:15:00 <p>Information published.</p> 2.0 2026-09-09T14:57:13 <p>Information published.</p> KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Mariner Linux Yes CVE-2026-64561 21626-17084 21626-17084 Moderate 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 2.0 2026-08-09T01:41:32 <p>Information published.</p> 1.0 2026-08-07T01:05:01 <p>Information published.</p> KVM: nVMX: Hide shadow VMCS right after VMCLEAR Mariner Linux Yes CVE-2026-64562 21626-17084 21626-17084 Critical 21626-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-07T01:08:21 <p>Information published.</p> 2.0 2026-08-09T01:41:54 <p>Information published.</p> rhashtable: clear stale iter->p on table restart Mariner Linux Yes CVE-2026-64563 21684-17084 21626-17084 21684-17084 21626-17084 Moderate 21684-17084 Moderate 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-09-11T01:46:09 <p>Information published.</p> 4.0 2026-09-25T02:26:49 <p>Information published.</p> 1.0 2026-08-07T01:05:49 <p>Information published.</p> 2.0 2026-08-11T01:04:24 <p>Information published.</p> 5.0 2026-10-02T03:02:47 <p>Information published.</p> sctp: don't free the ASCONF's own transport in DEL-IP processing Mariner Linux Yes CVE-2026-64564 21626-17084 21626-17084 Critical 21626-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-07T01:06:35 <p>Information published.</p> 2.0 2026-08-09T01:41:39 <p>Information published.</p> Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() Mariner Linux Yes CVE-2026-64565 21626-17084 21626-17084 Critical 21626-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 2.0 2026-08-09T01:41:47 <p>Information published.</p> 1.0 2026-08-07T01:07:30 <p>Information published.</p> btrfs: reject free space cache with more entries than pages Mariner Linux Yes CVE-2026-64567 21626-17084 21626-17084 Moderate 21626-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-09T01:43:07 <p>Information published.</p> mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Mariner Linux Yes CVE-2026-64569 21626-17084 21626-17084 Moderate 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-09T01:43:00 <p>Information published.</p> wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Mariner Linux Yes CVE-2026-64571 21626-17084 21626-17084 Low 21626-17084 3.2 3.2 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-07T01:18:32 <p>Information published.</p> 2.0 2026-08-09T01:42:09 <p>Information published.</p> ipv4: fib: free fib_alias with kfree_rcu() on insert error path Mariner Linux Yes CVE-2026-64572 21626-17084 21626-17084 Moderate 21626-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-09T01:42:53 <p>Information published.</p> Bluetooth: qca: fix NVM tag length underflow in TLV parser Mariner Linux Yes CVE-2026-64573 21626-17084 21626-17084 Moderate 21626-17084 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-09T01:42:46 <p>Information published.</p> wifi: mac80211: tear down new links on vif update error path Mariner Linux Yes CVE-2026-64574 21626-17084 21626-17084 Moderate 21626-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-09T01:42:39 <p>Information published.</p> nexthop: initialize extack in nh_res_bucket_migrate() Mariner Linux Yes CVE-2026-64576 21626-17084 21626-17084 Moderate 21626-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 2.0 2026-08-09T01:42:24 <p>Information published.</p> 1.0 2026-08-07T01:19:28 <p>Information published.</p> xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Mariner Linux Yes CVE-2026-64579 21626-17084 21626-17084 Moderate 21626-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-07T01:19:00 <p>Information published.</p> 2.0 2026-08-09T01:42:17 <p>Information published.</p> xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Mariner Linux Yes CVE-2026-64580 21626-17084 21626-17084 Moderate 21626-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-07T01:19:57 <p>Information published.</p> 2.0 2026-08-09T01:42:32 <p>Information published.</p> xfrm: fix sk_dst_cache double-free in xfrm_user_policy() Mariner Linux Yes CVE-2026-64581 21684-17084 21892-17084 21626-17084 21684-17084 21892-17084 21626-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21626-17084 5.1 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.1 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.1 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21626-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:05:15 <p>Information published.</p> 3.0 2026-09-23T02:05:59 <p>Information published.</p> 4.0 2026-09-23T15:03:03 <p>Information published.</p> 2.0 2026-09-05T01:59:12 <p>Information published.</p> 5.0 2026-09-24T01:36:01 <p>Information published.</p> 6.0 2026-10-02T03:04:20 <p>Information published.</p> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Mariner Linux Yes CVE-2026-64582 21474-17084 21474-17084 Important 21474-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:31:13 <p>Information published.</p> 2.0 2026-08-14T18:31:21 <p>Information published.</p> 1.0 2026-08-14T18:31:14 <p>Information published.</p> can: esd_usb: kill anchored URBs before freeing netdevs Mariner Linux Yes CVE-2026-64585 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-07T01:12:08 <p>Information published.</p> 3.0 2026-08-14T18:33:41 <p>Information published.</p> 2.0 2026-08-14T18:33:32 <p>Information published.</p> 2.0 2026-08-14T18:33:36 <p>Information published.</p> wifi: brcmfmac: drain bus_reset work on device removal Mariner Linux Yes CVE-2026-64586 21626-17084 21684-17084 21626-17084 21684-17084 Moderate 21626-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21626-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-08-10T14:41:04 <p>Information published.</p> 3.0 2026-09-11T01:46:18 <p>Information published.</p> 1.0 2026-08-07T01:15:09 <p>Information published.</p> 4.0 2026-09-25T02:34:36 <p>Information published.</p> 5.0 2026-10-02T03:05:53 <p>Information published.</p> dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning Mariner Linux Yes CVE-2026-64590 21626-17084 21626-17084 Important 21626-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 1.0 2026-08-07T01:12:58 <p>Information published.</p> 2.0 2026-08-09T01:43:23 <p>Information published.</p> btrfs: do not trim a device which is not writeable Mariner Linux Yes CVE-2026-64593 21474-17084 21474-17084 Important 21474-17084 9.8 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:U/RC:R 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T17:55:08 <p>Information published.</p> 2.0 2026-08-14T17:55:13 <p>Information published.</p> 1.0 2026-08-07T01:17:48 <p>Information published.</p> 3.0 2026-08-14T17:55:16 <p>Information published.</p> smb: client: fix double-free in SMB2_close() replay Mariner Linux Yes CVE-2026-64597 21474-17084 21474-17084 Important 21474-17084 8.6 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-07T01:11:16 <p>Information published.</p> 2.0 2026-08-14T18:32:49 <p>Information published.</p> 3.0 2026-08-14T18:32:54 <p>Information published.</p> 3.0 2026-08-14T18:32:52 <p>Information published.</p> smb/client: Fix error code in smb2_aead_req_alloc() Mariner Linux Yes CVE-2026-64598 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-07T01:18:19 <p>Information published.</p> 2.0 2026-08-14T17:55:57 <p>Information published.</p> 2.0 2026-08-14T17:55:57 <p>Information published.</p> 3.0 2026-08-14T17:55:59 <p>Information published.</p> crypto: amlogic - avoid double cleanup in meson_crypto_probe() Mariner Linux Yes CVE-2026-64599 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-07T01:17:19 <p>Information published.</p> 2.0 2026-08-14T17:54:26 <p>Information published.</p> 2.0 2026-08-14T17:54:28 <p>Information published.</p> 2.0 2026-08-14T17:54:29 <p>Information published.</p> KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Mariner Linux Yes CVE-2026-64604 21626-17084 21626-17084 Important 21626-17084 8.4 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:U/RL:U/RC:C 21626-17084 CBL-Mariner Releases 21626-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21626-17084 CBL-Mariner Releases 2.0 2026-08-09T01:43:30 <p>Information published.</p> 1.0 2026-08-07T01:13:45 <p>Information published.</p> PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands Mariner PostgreSQL Yes CVE-2026-6464 Inclusion of Functionality from Untrusted Control Sphere 21725-17084 21725-17084 Important 21725-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:02:57 <p>Information published.</p> 1.0 2026-08-14T19:34:09 <p>Information published.</p> GitHub CLI: Partial token disclosure in `gh auth status` output Mariner GitHub_M Yes CVE-2026-64652 Insertion of Sensitive Information Into Sent Data 21668-17084 21668-17084 Low 21668-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21668-17084 CBL-Mariner Releases 21668-17084 No Security Update 2.97.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 CBL-Mariner Releases 3.0 2026-08-23T14:50:42 <p>Information published.</p> 1.0 2026-08-11T01:02:48 <p>Information published.</p> 2.0 2026-08-14T18:35:03 <p>Information published.</p> GitHub CLI: Unescaped variable components in request URLs could allow path traversal Mariner GitHub_M Yes CVE-2026-64653 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21668-17084 21668-17084 Moderate 21668-17084 CBL-Mariner Releases 21668-17084 No Security Update 2.97.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 CBL-Mariner Releases 2.0 2026-08-23T14:50:21 <p>Information published.</p> 1.0 2026-08-11T01:02:35 <p>Information published.</p> GitHub CLI: Terminal escape sequence injection in multiple `gh` commands Mariner GitHub_M Yes CVE-2026-64654 Improper Neutralization of Escape, Meta, or Control Sequences 21668-17084 21668-17084 Moderate 21668-17084 CBL-Mariner Releases 21668-17084 No Security Update 2.97.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 CBL-Mariner Releases 1.0 2026-08-11T01:18:06 <p>Information published.</p> 2.0 2026-08-23T14:50:03 <p>Information published.</p> GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching Mariner GitHub_M Yes CVE-2026-64655 Incorrect Regular Expression 21668-17084 21668-17084 Low 21668-17084 CBL-Mariner Releases 21668-17084 No Security Update 2.97.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 CBL-Mariner Releases 2.0 2026-08-14T18:35:38 <p>Information published.</p> 3.0 2026-08-23T14:51:04 <p>Information published.</p> 1.0 2026-08-11T01:03:03 <p>Information published.</p> PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership Mariner PostgreSQL Yes CVE-2026-6469 Incorrect Ownership Assignment 21725-17084 21725-17084 Low 21725-17084 3.8 3.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 1.0 2026-08-14T19:25:59 <p>Information published.</p> 2.0 2026-08-23T15:01:41 <p>Information published.</p> PostgreSQL fails to check type USAGE privilege Mariner PostgreSQL Yes CVE-2026-6470 Missing Authorization 21725-17084 21725-17084 Moderate 21725-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21725-17084 CBL-Mariner Releases 21725-17084 No Security Update 16.15-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21725-17084 CBL-Mariner Releases 2.0 2026-08-23T15:02:48 <p>Information published.</p> 1.0 2026-08-14T19:33:12 <p>Information published.</p> PostgreSQL logical decoding can dlopen arbitrary file Mariner PostgreSQL Yes CVE-2026-6471 Missing Authorization 21855-17084 21725-17084 21855-17084 21725-17084 Moderate 21855-17084 Moderate 21725-17084 7.2 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U 21855-17084 7.2 6.6 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U 21725-17084 Release Notes 21855-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21855-17084 Release Notes 1.0 2026-08-14T19:21:10 <p>Information published.</p> 2.0 2026-09-09T14:59:53 <p>Information published.</p> 3.0 2026-09-25T02:19:51 <p>Information published.</p> gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser Mariner GitHub_M Yes CVE-2026-65819 Out-of-bounds Read 21693-17084 21693-17084 Important 21693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21693-17084 CBL-Mariner Releases 21693-17084 No Security Update 1.31.0-30 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21693-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:29 <p>Information published.</p> 2.0 2026-08-23T14:52:56 <p>Information published.</p> Vitess: Missing authorization on vttablet /debug/vrlog exposes live VReplication SQL data Mariner GitHub_M Yes CVE-2026-65959 Missing Authorization 21675-17084 21858-17084 21675-17084 21858-17084 Moderate 21675-17084 Moderate 21858-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21675-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21858-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21675-17084 21858-17084 Security Update 19.0.4-13 21675-17084 21858-17084 2.0 2026-09-06T15:05:07 <p>Information published.</p> 3.0 2026-09-09T15:04:28 <p>Information published.</p> 4.0 2026-09-13T01:48:43 <p>Information published.</p> 1.0 2026-08-20T21:59:42 <p>Information published.</p> Expat Denial of Service via storeAtts() Quadratic Complexity Mariner VulnCheck Yes CVE-2026-66046 Inefficient Algorithmic Complexity 21698-17084 21698-17084 Important 21698-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21698-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21698-17084 Security Update 2.8.3-2 21698-17084 2.0 2026-08-23T01:03:57 <p>Information published.</p> 4.0 2026-09-05T01:48:28 <p>Information published.</p> 1.0 2026-08-20T21:59:55 <p>Information published.</p> 3.0 2026-08-24T01:44:15 <p>Information published.</p> Path Traversal in GNU cpio Mariner CERT-PL Yes CVE-2026-66484 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 19929-17084 21849-17084 19929-17084 21849-17084 Moderate 19929-17084 Moderate 21849-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21849-17084 Security Update 2.14-2 21849-17084 1.0 2026-08-11T01:08:34 <p>Information published.</p> 3.0 2026-09-13T01:47:00 <p>Information published.</p> 2.0 2026-09-09T14:56:37 <p>Information published.</p> Uncontrolled Memory Allocation in GNU cpio Mariner CERT-PL Yes CVE-2026-66485 Memory Allocation with Excessive Size Value 19929-17084 21849-17084 19929-17084 21849-17084 Moderate 19929-17084 Moderate 21849-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21849-17084 Security Update 2.14-2 21849-17084 2.0 2026-09-09T14:56:27 <p>Information published.</p> 3.0 2026-09-13T01:46:53 <p>Information published.</p> 1.0 2026-08-11T01:08:24 <p>Information published.</p> Improper Output Encoding in GNU cpio Mariner CERT-PL Yes CVE-2026-66486 Improper Encoding or Escaping of Output 19929-17084 21849-17084 19929-17084 21849-17084 Moderate 19929-17084 Moderate 21849-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21849-17084 Security Update 2.14-2 21849-17084 1.0 2026-08-11T01:08:12 <p>Information published.</p> 2.0 2026-09-09T14:56:17 <p>Information published.</p> 3.0 2026-09-13T01:46:45 <p>Information published.</p> Potential stack-based buffer clash during tilde expansion in wordexp Mariner glibc Yes CVE-2026-6791 Stack-based Buffer Overflow 21384-17084 21824-17084 21384-17084 21824-17084 Moderate 21384-17084 Moderate 21824-17084 Release Notes 21824-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21824-17084 Release Notes 1.0 2026-08-12T01:03:17 <p>Information published.</p> 2.0 2026-09-09T14:57:03 <p>Information published.</p> 3.0 2026-09-25T02:13:58 <p>Information published.</p> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Mariner Linux Yes CVE-2026-68081 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 21892-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-09T01:02:40 <p>Information published.</p> 5.0 2026-09-24T02:40:15 <p>Information published.</p> 2.0 2026-08-10T14:43:07 <p>Information published.</p> 3.0 2026-09-23T02:06:22 <p>Information published.</p> 4.0 2026-09-24T01:36:43 <p>Information published.</p> libceph: fix two unsafe bare decodes in decode_lockers() Mariner Linux Yes CVE-2026-68082 21684-17084 21892-17084 21684-17084 21892-17084 Important 21684-17084 Important 21892-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H 21684-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-09T01:02:46 <p>Information published.</p> 3.0 2026-09-23T02:07:09 <p>Information published.</p> 4.0 2026-09-23T15:03:55 <p>Information published.</p> 5.0 2026-09-24T01:37:30 <p>Information published.</p> 2.0 2026-08-10T14:43:18 <p>Information published.</p> 6.0 2026-10-02T03:07:13 <p>Information published.</p> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Mariner Linux Yes CVE-2026-68083 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:32:54 <p>Information published.</p> 1.0 2026-08-11T01:06:39 <p>Information published.</p> 3.0 2026-09-24T01:51:58 <p>Information published.</p> 4.0 2026-09-24T02:14:03 <p>Information published.</p> staging: vme_user: fix location monitor leak in tsi148 bridge Mariner Linux Yes CVE-2026-68084 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:14 <p>Information published.</p> 2.0 2026-08-14T20:07:57 <p>Information published.</p> 3.0 2026-08-14T20:08:07 <p>Information published.</p> 2.0 2026-08-14T20:08:05 <p>Information published.</p> 2.0 2026-08-14T20:08:06 <p>Information published.</p> 4.0 2026-08-14T20:08:14 <p>Information published.</p> Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled Mariner Linux Yes CVE-2026-68085 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:17:26 <p>Information published.</p> 2.0 2026-09-23T02:29:54 <p>Information published.</p> 3.0 2026-09-24T02:08:13 <p>Information published.</p> 4.0 2026-09-24T02:48:10 <p>Information published.</p> 5.0 2026-10-24T14:44:22 <p>Information published.</p> mm/khugepaged: write all dirty file folios when collapsing Mariner Linux Yes CVE-2026-68086 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.6 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U 21684-17084 6.6 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U 21892-17084 6.6 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:13:30 <p>Information published.</p> 2.0 2026-09-23T02:27:28 <p>Information published.</p> 3.0 2026-09-24T02:03:54 <p>Information published.</p> 4.0 2026-09-24T02:47:22 <p>Information published.</p> usb: gadget: function: rndis: add length check to response query Mariner Linux Yes CVE-2026-68088 21684-17084 21684-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:44 <p>Information published.</p> 2.0 2026-08-14T18:16:32 <p>Information published.</p> 2.0 2026-08-14T18:16:28 <p>Information published.</p> 3.0 2026-08-14T18:16:34 <p>Information published.</p> debugobjects: Plug race against a concurrent OOM disable Mariner Linux Yes CVE-2026-68090 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:48 <p>Information published.</p> 2.0 2026-08-14T18:33:48 <p>Information published.</p> 2.0 2026-08-14T18:33:49 <p>Information published.</p> 3.0 2026-08-14T18:33:55 <p>Information published.</p> HID: wacom: stop hardware after post-start probe failures Mariner Linux Yes CVE-2026-68091 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:13:28 <p>Information published.</p> 2.0 2026-08-14T18:13:31 <p>Information published.</p> 1.0 2026-08-11T01:10:57 <p>Information published.</p> 2.0 2026-08-14T18:13:30 <p>Information published.</p> KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug Mariner Linux Yes CVE-2026-68093 21474-17084 21474-17084 Moderate 21474-17084 6.7 6.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:19 <p>Information published.</p> 2.0 2026-08-14T19:59:03 <p>Information published.</p> 2.0 2026-08-14T19:59:10 <p>Information published.</p> 2.0 2026-08-14T19:59:06 <p>Information published.</p> audit: fix recursive locking deadlock in audit_dupe_exe() Mariner Linux Yes CVE-2026-68096 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:14:36 <p>Information published.</p> 1.0 2026-08-11T01:09:15 <p>Information published.</p> 2.0 2026-08-14T19:14:31 <p>Information published.</p> 2.0 2026-08-14T19:14:32 <p>Information published.</p> ksmbd: validate ACE size against SID sub-authorities Mariner Linux Yes CVE-2026-68097 21684-17084 21684-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:03:18 <p>Information published.</p> 2.0 2026-08-14T18:56:33 <p>Information published.</p> 3.0 2026-08-14T18:56:34 <p>Information published.</p> 3.0 2026-08-14T18:56:36 <p>Information published.</p> ksmbd: bound DACL dedup walk to copied ACEs Mariner Linux Yes CVE-2026-68098 21684-17084 21684-17084 Moderate 21684-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:03:04 <p>Information published.</p> 2.0 2026-08-14T18:55:34 <p>Information published.</p> 2.0 2026-08-14T18:55:35 <p>Information published.</p> 3.0 2026-08-14T18:55:43 <p>Information published.</p> ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Mariner Linux Yes CVE-2026-68099 21474-17084 21474-17084 Moderate 21474-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:44 <p>Information published.</p> 2.0 2026-08-14T19:41:32 <p>Information published.</p> 2.0 2026-08-14T19:41:28 <p>Information published.</p> 2.0 2026-08-14T19:41:28 <p>Information published.</p> ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Mariner Linux Yes CVE-2026-68100 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:10 <p>Information published.</p> 2.0 2026-08-14T18:55:54 <p>Information published.</p> 2.0 2026-08-14T18:55:53 <p>Information published.</p> 3.0 2026-08-14T18:55:59 <p>Information published.</p> drm/amdgpu: fix aperture mapping leak Mariner Linux Yes CVE-2026-68102 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:45 <p>Information published.</p> 2.0 2026-08-14T18:47:01 <p>Information published.</p> 2.0 2026-08-14T18:47:04 <p>Information published.</p> 3.0 2026-08-14T18:47:10 <p>Information published.</p> drm/amdgpu: reject mapping a reserved doorbell to a new queue Mariner Linux Yes CVE-2026-68103 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 2.0 2026-08-14T18:29:59 <p>Information published.</p> 3.0 2026-08-14T18:30:09 <p>Information published.</p> 1.0 2026-08-11T01:14:37 <p>Information published.</p> 2.0 2026-08-14T18:30:06 <p>Information published.</p> drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Mariner Linux Yes CVE-2026-68104 21684-17084 21684-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:03:33 <p>Information published.</p> 2.0 2026-08-14T18:57:31 <p>Information published.</p> 2.0 2026-08-14T18:57:29 <p>Information published.</p> 3.0 2026-08-14T18:57:32 <p>Information published.</p> drm/amdgpu: Fix kernel panic during driver load failure Mariner Linux Yes CVE-2026-68105 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:33 <p>Information published.</p> 2.0 2026-08-14T18:50:47 <p>Information published.</p> 2.0 2026-08-14T18:50:52 <p>Information published.</p> 3.0 2026-08-14T18:50:57 <p>Information published.</p> drm/amdgpu: fix division by zero with invalid uvd dimensions Mariner Linux Yes CVE-2026-68106 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:45 <p>Information published.</p> 2.0 2026-08-14T18:30:43 <p>Information published.</p> 2.0 2026-08-14T18:30:48 <p>Information published.</p> 2.0 2026-08-14T18:30:50 <p>Information published.</p> drm/amdgpu/vcn4: avoid rereading IB param length Mariner Linux Yes CVE-2026-68107 21684-17084 21684-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:07 <p>Information published.</p> 2.0 2026-08-14T18:28:44 <p>Information published.</p> 3.0 2026-08-14T18:28:54 <p>Information published.</p> drm/amdgpu/vce: fix integer overflow in image size Mariner Linux Yes CVE-2026-68108 21684-17084 21684-17084 Important 21684-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:28 <p>Information published.</p> 2.0 2026-08-14T18:15:04 <p>Information published.</p> 2.0 2026-08-14T18:15:03 <p>Information published.</p> 2.0 2026-08-14T18:15:04 <p>Information published.</p> drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68109 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:34 <p>Information published.</p> 2.0 2026-08-14T19:04:14 <p>Information published.</p> 2.0 2026-08-14T19:04:15 <p>Information published.</p> 2.0 2026-08-14T19:04:20 <p>Information published.</p> drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68110 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:18 <p>Information published.</p> 3.0 2026-08-14T18:06:08 <p>Information published.</p> 2.0 2026-08-14T18:06:02 <p>Information published.</p> 3.0 2026-08-14T18:06:06 <p>Information published.</p> drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68111 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 CBL-Mariner Releases 21684-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:38 <p>Information published.</p> 2.0 2026-08-14T19:17:08 <p>Information published.</p> 3.0 2026-08-14T19:17:20 <p>Information published.</p> 3.0 2026-08-14T19:17:23 <p>Information published.</p> drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68112 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:11:12 <p>Information published.</p> drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68113 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:13:45 <p>Information published.</p> drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68114 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:02:35 <p>Information published.</p> drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68115 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:10:17 <p>Information published.</p> vxlan: mdb: Fix source list corruption on a failed replace Mariner Linux Yes CVE-2026-68116 21474-17084 21474-17084 Moderate 21474-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:57 <p>Information published.</p> 2.0 2026-08-14T18:22:23 <p>Information published.</p> 2.0 2026-08-14T18:22:23 <p>Information published.</p> 3.0 2026-08-14T18:22:28 <p>Information published.</p> tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Mariner Linux Yes CVE-2026-68117 21474-17084 21474-17084 Low 21474-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:31:32 <p>Information published.</p> 2.0 2026-08-14T18:31:36 <p>Information published.</p> 1.0 2026-08-11T01:15:01 <p>Information published.</p> 3.0 2026-08-14T18:31:38 <p>Information published.</p> tcp: challenge ACK for non-exact RST in SYN-RECEIVED Mariner Linux Yes CVE-2026-68118 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:11:05 <p>Information published.</p> 2.0 2026-09-23T02:21:39 <p>Information published.</p> 3.0 2026-09-23T15:23:48 <p>Information published.</p> 4.0 2026-09-24T01:55:10 <p>Information published.</p> 5.0 2026-10-02T03:25:38 <p>Information published.</p> pppoe: reload header pointer after dev_hard_header() Mariner Linux Yes CVE-2026-68121 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:46:04 <p>Information published.</p> 2.0 2026-08-14T18:46:06 <p>Information published.</p> 1.0 2026-08-11T01:16:38 <p>Information published.</p> 3.0 2026-08-14T18:46:08 <p>Information published.</p> openvswitch: fix GSO userspace truncation underflow Mariner Linux Yes CVE-2026-68123 21474-17084 21474-17084 Moderate 21474-17084 5.7 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:18:04 <p>Information published.</p> 1.0 2026-08-11T01:12:01 <p>Information published.</p> 2.0 2026-08-14T18:18:03 <p>Information published.</p> 3.0 2026-08-14T18:18:09 <p>Information published.</p> mctp: serial: handle zero-length frames to prevent rx buffer overflow Mariner Linux Yes CVE-2026-68124 21474-17084 21474-17084 Important 21474-17084 7.7 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:55 <p>Information published.</p> 3.0 2026-08-14T18:35:07 <p>Information published.</p> 2.0 2026-08-14T18:34:58 <p>Information published.</p> 2.0 2026-08-14T18:35:03 <p>Information published.</p> mac802154: llsec: reject frames shorter than the authentication tag Mariner Linux Yes CVE-2026-68125 21474-17084 21474-17084 Moderate 21474-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:54 <p>Information published.</p> 2.0 2026-08-14T19:20:20 <p>Information published.</p> 2.0 2026-08-14T19:20:21 <p>Information published.</p> 2.0 2026-08-14T19:20:13 <p>Information published.</p> mac802154: hold an interface reference across the scan worker Mariner Linux Yes CVE-2026-68126 21474-17084 21474-17084 Moderate 21474-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:53 <p>Information published.</p> 2.0 2026-08-14T18:42:11 <p>Information published.</p> 2.0 2026-08-14T18:42:10 <p>Information published.</p> 3.0 2026-08-14T18:42:17 <p>Information published.</p> ila: reload IPv6 header after pskb_may_pull in checksum adjust Mariner Linux Yes CVE-2026-68127 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:14 <p>Information published.</p> 2.0 2026-08-14T18:59:21 <p>Information published.</p> 2.0 2026-08-14T18:59:18 <p>Information published.</p> 3.0 2026-08-14T18:59:25 <p>Information published.</p> gve: fix Rx queue stall on alloc failure Mariner Linux Yes CVE-2026-68129 21684-17084 21684-17084 Moderate 21684-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:11:20 <p>Information published.</p> 4.0 2026-09-25T02:00:22 <p>Information published.</p> 2.0 2026-09-10T03:31:50 <p>Information published.</p> 3.0 2026-09-11T01:47:55 <p>Information published.</p> 5.0 2026-10-02T03:27:03 <p>Information published.</p> ksmbd: defer destroy_previous_session() until after NTLM authentication Mariner Linux Yes CVE-2026-68130 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:56 <p>Information published.</p> 2.0 2026-08-14T18:51:05 <p>Information published.</p> 2.0 2026-08-14T18:51:07 <p>Information published.</p> 2.0 2026-08-14T18:51:07 <p>Information published.</p> rbd: Reset positive result codes to zero in object map update path Mariner Linux Yes CVE-2026-68131 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:57 <p>Information published.</p> 3.0 2026-08-14T18:59:38 <p>Information published.</p> 2.0 2026-08-14T18:59:34 <p>Information published.</p> 3.0 2026-08-14T18:59:38 <p>Information published.</p> super: fix emergency thaw deadlock on frozen block devices Mariner Linux Yes CVE-2026-68132 21684-17084 21892-17084 21684-17084 21892-17084 Critical 21684-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 3.0 2026-09-23T15:33:00 <p>Information published.</p> 1.0 2026-08-11T01:17:05 <p>Information published.</p> 2.0 2026-09-23T02:29:30 <p>Information published.</p> 4.0 2026-09-24T02:07:00 <p>Information published.</p> 5.0 2026-10-02T03:34:17 <p>Information published.</p> net: hip04: fix RX buffer leak on build_skb failure Mariner Linux Yes CVE-2026-68135 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:18 <p>Information published.</p> 2.0 2026-08-14T19:51:59 <p>Information published.</p> 2.0 2026-08-14T19:52:01 <p>Information published.</p> 2.0 2026-08-14T19:51:57 <p>Information published.</p> net: gro: fix double aggregation of flush-marked skbs Mariner Linux Yes CVE-2026-68136 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:06:14 <p>Information published.</p> 4.0 2026-09-24T01:48:54 <p>Information published.</p> 2.0 2026-09-23T02:17:42 <p>Information published.</p> 3.0 2026-09-23T15:18:28 <p>Information published.</p> 5.0 2026-10-02T03:18:29 <p>Information published.</p> net/x25: fix use-after-free in x25_kill_by_neigh() Mariner Linux Yes CVE-2026-68137 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:14 <p>Information published.</p> 2.0 2026-08-14T19:37:29 <p>Information published.</p> 2.0 2026-08-14T19:37:34 <p>Information published.</p> 2.0 2026-08-14T19:37:34 <p>Information published.</p> net/sched: serialize qdisc_rtab_list against concurrent get/put Mariner Linux Yes CVE-2026-68138 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:11:28 <p>Information published.</p> 2.0 2026-09-23T02:22:09 <p>Information published.</p> 4.0 2026-09-24T01:56:02 <p>Information published.</p> 3.0 2026-09-23T15:24:06 <p>Information published.</p> 5.0 2026-10-02T03:28:34 <p>Information published.</p> net/iucv: fix use-after-free of a severed iucv_path Mariner Linux Yes CVE-2026-68140 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:01 <p>Information published.</p> 2.0 2026-08-14T19:50:03 <p>Information published.</p> 2.0 2026-08-14T19:50:00 <p>Information published.</p> 2.0 2026-08-14T19:49:59 <p>Information published.</p> net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() Mariner Linux Yes CVE-2026-68141 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:23 <p>Information published.</p> 3.0 2026-08-14T19:15:24 <p>Information published.</p> 2.0 2026-08-14T19:15:19 <p>Information published.</p> 2.0 2026-08-14T19:15:21 <p>Information published.</p> geneve: require CAP_NET_ADMIN in the device netns for changelink Mariner Linux Yes CVE-2026-68142 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:28 <p>Information published.</p> 2.0 2026-08-14T18:25:24 <p>Information published.</p> 2.0 2026-08-14T18:25:26 <p>Information published.</p> 3.0 2026-08-14T18:25:32 <p>Information published.</p> net: slip: serialize receive against buffer reallocation Mariner Linux Yes CVE-2026-68143 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:40 <p>Information published.</p> 2.0 2026-08-14T18:52:59 <p>Information published.</p> 2.0 2026-08-14T18:52:58 <p>Information published.</p> 2.0 2026-08-14T18:53:03 <p>Information published.</p> phonet: pep: fix use-after-free in pep_get_sb() Mariner Linux Yes CVE-2026-68144 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:36 <p>Information published.</p> 2.0 2026-08-14T18:26:11 <p>Information published.</p> 2.0 2026-08-14T18:26:07 <p>Information published.</p> 2.0 2026-08-14T18:26:08 <p>Information published.</p> iomap: fix out-of-bounds bitmap_set() with zero-length range Mariner Linux Yes CVE-2026-68145 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 2.0 2026-09-23T02:08:53 <p>Information published.</p> 1.0 2026-08-11T01:09:48 <p>Information published.</p> 3.0 2026-09-23T15:05:10 <p>Information published.</p> 4.0 2026-09-24T01:38:46 <p>Information published.</p> 5.0 2026-10-02T03:09:47 <p>Information published.</p> ftrace: Add global mutex to serialize trace_parser access Mariner Linux Yes CVE-2026-68146 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:49 <p>Information published.</p> 2.0 2026-08-14T20:04:10 <p>Information published.</p> 2.0 2026-08-14T20:04:14 <p>Information published.</p> 2.0 2026-08-14T20:04:18 <p>Information published.</p> fscrypt: Avoid dynamic allocation in fscrypt_get_devices() Mariner Linux Yes CVE-2026-68147 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:42 <p>Information published.</p> 2.0 2026-08-14T20:02:51 <p>Information published.</p> 3.0 2026-08-14T20:03:01 <p>Information published.</p> 3.0 2026-08-14T20:03:04 <p>Information published.</p> fscrypt: Add missing superblock check in find_or_insert_direct_key() Mariner Linux Yes CVE-2026-68148 21474-17084 21474-17084 Moderate 21474-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:11 <p>Information published.</p> 2.0 2026-08-14T18:50:06 <p>Information published.</p> 2.0 2026-08-14T18:50:11 <p>Information published.</p> 2.0 2026-08-14T18:50:11 <p>Information published.</p> fs: preserve ACL_DONT_CACHE state in forget_cached_acl() Mariner Linux Yes CVE-2026-68149 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:11 <p>Information published.</p> 2.0 2026-08-14T19:57:48 <p>Information published.</p> 2.0 2026-08-14T19:57:52 <p>Information published.</p> 2.0 2026-08-14T19:57:51 <p>Information published.</p> binfmt_elf_fdpic: only honour the first PT_INTERP Mariner Linux Yes CVE-2026-68151 21474-17084 21474-17084 Moderate 21474-17084 5.0 4.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:21 <p>Information published.</p> 2.0 2026-08-14T18:39:14 <p>Information published.</p> 2.0 2026-08-14T18:39:18 <p>Information published.</p> 2.0 2026-08-14T18:39:18 <p>Information published.</p> amt: fix use-after-free in AMT delayed works Mariner Linux Yes CVE-2026-68152 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Important 21684-17084 Important 21892-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:05:49 <p>Information published.</p> 2.0 2026-09-23T02:16:26 <p>Information published.</p> 3.0 2026-09-24T01:48:10 <p>Information published.</p> 4.0 2026-09-24T02:44:10 <p>Information published.</p> libceph: remove debugfs files before client teardown Mariner Linux Yes CVE-2026-68153 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:05 <p>Information published.</p> 2.0 2026-08-14T20:06:39 <p>Information published.</p> 3.0 2026-08-14T20:06:46 <p>Information published.</p> 3.0 2026-08-14T20:06:46 <p>Information published.</p> 3.0 2026-08-14T20:06:52 <p>Information published.</p> libceph: reject zero bucket types in crush_decode Mariner Linux Yes CVE-2026-68154 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:05 <p>Information published.</p> 2.0 2026-08-14T19:36:19 <p>Information published.</p> 2.0 2026-08-14T19:36:29 <p>Information published.</p> 2.0 2026-08-14T19:36:28 <p>Information published.</p> libceph: Reject monmaps advertising zero monitors Mariner Linux Yes CVE-2026-68155 21684-17084 21684-17084 Important 21684-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:08:23 <p>Information published.</p> libceph: refresh auth->authorizer_buf{,_len} after authorizer update Mariner Linux Yes CVE-2026-68156 21474-17084 21474-17084 Moderate 21474-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:20 <p>Information published.</p> 2.0 2026-08-14T18:14:15 <p>Information published.</p> 2.0 2026-08-14T18:14:15 <p>Information published.</p> 2.0 2026-08-14T18:14:17 <p>Information published.</p> libceph: guard missing CRUSH type name lookup Mariner Linux Yes CVE-2026-68157 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:41 <p>Information published.</p> 2.0 2026-08-14T18:20:51 <p>Information published.</p> 2.0 2026-08-14T18:20:50 <p>Information published.</p> 2.0 2026-08-14T18:20:52 <p>Information published.</p> libceph: Fix multiplication overflow in decode_new_up_state_weight() Mariner Linux Yes CVE-2026-68158 21474-17084 21474-17084 Moderate 21474-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:22:42 <p>Information published.</p> 1.0 2026-08-11T01:10:09 <p>Information published.</p> 2.0 2026-08-14T19:22:41 <p>Information published.</p> 2.0 2026-08-14T19:22:43 <p>Information published.</p> libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Mariner Linux Yes CVE-2026-68159 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:10:56 <p>Information published.</p> 4.0 2026-09-24T02:16:17 <p>Information published.</p> 2.0 2026-09-23T02:35:20 <p>Information published.</p> 3.0 2026-09-23T15:40:54 <p>Information published.</p> 5.0 2026-10-02T03:35:58 <p>Information published.</p> ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Mariner Linux Yes CVE-2026-68160 21474-17084 21474-17084 Critical 21474-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:08 <p>Information published.</p> 2.0 2026-08-14T19:09:08 <p>Information published.</p> 3.0 2026-08-14T19:09:14 <p>Information published.</p> 2.0 2026-08-14T19:09:16 <p>Information published.</p> sctp: close UDP tunnel sockets during netns teardown Mariner Linux Yes CVE-2026-68161 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:08:33 <p>Information published.</p> 2.0 2026-09-11T01:47:28 <p>Information published.</p> 3.0 2026-09-25T01:57:03 <p>Information published.</p> 4.0 2026-10-02T03:21:16 <p>Information published.</p> sctp: avoid auth_enable sysctl UAF during netns teardown Mariner Linux Yes CVE-2026-68162 21684-17084 21684-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-10-01T01:58:09 <p>Information published.</p> 2.0 2026-09-11T01:48:21 <p>Information published.</p> 1.0 2026-08-11T01:16:25 <p>Information published.</p> 4.0 2026-10-02T03:32:48 <p>Information published.</p> mm/damon/core: disallow overlapping input ranges for damon_set_regions() Mariner Linux Yes CVE-2026-68164 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:43 <p>Information published.</p> 3.0 2026-08-14T18:26:57 <p>Information published.</p> 2.0 2026-08-14T18:26:49 <p>Information published.</p> 3.0 2026-08-14T18:26:54 <p>Information published.</p> mm/damon/core: validate ranges in damon_set_regions() Mariner Linux Yes CVE-2026-68165 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 3.0 2026-08-14T19:33:25 <p>Information published.</p> 1.0 2026-08-11T01:11:42 <p>Information published.</p> 2.0 2026-08-14T19:33:20 <p>Information published.</p> 2.0 2026-08-14T19:33:23 <p>Information published.</p> userfaultfd: prevent registration of special VMAs Mariner Linux Yes CVE-2026-68166 21892-17084 21684-17084 21892-17084 21684-17084 Critical 21892-17084 Critical 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 2.0 2026-09-23T02:10:07 <p>Information published.</p> 3.0 2026-09-23T15:07:03 <p>Information published.</p> 4.0 2026-09-24T01:40:09 <p>Information published.</p> 1.0 2026-08-11T01:10:26 <p>Information published.</p> 5.0 2026-10-02T03:11:11 <p>Information published.</p> mptcp: pm: userspace: fix use-after-free in get_local_id Mariner Linux Yes CVE-2026-68169 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:16:13 <p>Information published.</p> 2.0 2026-09-11T01:46:57 <p>Information published.</p> 3.0 2026-09-25T01:50:58 <p>Information published.</p> 4.0 2026-10-02T03:15:38 <p>Information published.</p> arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates Mariner Linux Yes CVE-2026-68171 21474-17084 21474-17084 Low 21474-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:40 <p>Information published.</p> 3.0 2026-08-14T19:01:07 <p>Information published.</p> 2.0 2026-08-14T19:01:06 <p>Information published.</p> 2.0 2026-08-14T19:01:05 <p>Information published.</p> tracing: Fix resource leak on mmiotrace trace_pipe close Mariner Linux Yes CVE-2026-68175 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:03 <p>Information published.</p> 2.0 2026-08-14T19:29:07 <p>Information published.</p> 2.0 2026-08-14T19:29:12 <p>Information published.</p> 3.0 2026-08-14T19:29:14 <p>Information published.</p> tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Mariner Linux Yes CVE-2026-68176 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:46 <p>Information published.</p> 2.0 2026-08-14T19:18:43 <p>Information published.</p> 2.0 2026-08-14T19:18:33 <p>Information published.</p> 2.0 2026-08-14T19:18:39 <p>Information published.</p> intel_th: fix MSC output device reference leak Mariner Linux Yes CVE-2026-68180 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:58 <p>Information published.</p> 2.0 2026-08-14T19:05:15 <p>Information published.</p> 2.0 2026-08-14T19:05:16 <p>Information published.</p> 3.0 2026-08-14T19:05:20 <p>Information published.</p> mei: bus: access mei_device under device_lock on cleanup Mariner Linux Yes CVE-2026-68181 21474-17084 21474-17084 Important 21474-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:05:16 <p>Information published.</p> 3.0 2026-08-14T19:02:10 <p>Information published.</p> 2.0 2026-08-14T19:02:02 <p>Information published.</p> 2.0 2026-08-14T19:02:00 <p>Information published.</p> comedi: comedi_parport: deal with premature interrupt Mariner Linux Yes CVE-2026-68182 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:47 <p>Information published.</p> 2.0 2026-08-14T19:28:04 <p>Information published.</p> 2.0 2026-08-14T19:28:05 <p>Information published.</p> 2.0 2026-08-14T19:28:05 <p>Information published.</p> firmware: stratix10-svc: fix memory leaks and list corruption bugs Mariner Linux Yes CVE-2026-68183 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:02:49 <p>Information published.</p> 3.0 2026-09-11T01:47:08 <p>Information published.</p> 2.0 2026-09-10T03:31:42 <p>Information published.</p> 4.0 2026-09-25T01:52:02 <p>Information published.</p> 5.0 2026-10-02T03:16:59 <p>Information published.</p> cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Mariner Linux Yes CVE-2026-68184 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:14 <p>Information published.</p> 3.0 2026-08-14T18:38:22 <p>Information published.</p> 3.0 2026-08-14T18:38:24 <p>Information published.</p> 2.0 2026-08-14T18:38:17 <p>Information published.</p> LoongArch: Move jump_label_init() before parse_early_param() Mariner Linux Yes CVE-2026-68185 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Critical 21684-17084 Critical 21892-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:09:15 <p>Information published.</p> 2.0 2026-09-23T02:19:48 <p>Information published.</p> 4.0 2026-09-24T02:45:12 <p>Information published.</p> 3.0 2026-09-24T01:53:29 <p>Information published.</p> binfmt_misc: set have_execfd only once the interpreter is opened Mariner Linux Yes CVE-2026-68186 21474-17084 21474-17084 Important 21474-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:02:36 <p>Information published.</p> 2.0 2026-08-14T18:38:04 <p>Information published.</p> 2.0 2026-08-14T18:38:05 <p>Information published.</p> 2.0 2026-08-14T18:38:06 <p>Information published.</p> exec: fix unsigned loop counter wrap in transfer_args_to_stack() Mariner Linux Yes CVE-2026-68187 21474-17084 21474-17084 Moderate 21474-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:05:39 <p>Information published.</p> 2.0 2026-08-14T19:02:59 <p>Information published.</p> 2.0 2026-08-14T19:02:53 <p>Information published.</p> 3.0 2026-08-14T19:03:03 <p>Information published.</p> Bluetooth: RFCOMM: Fix session UAF in set_termios Mariner Linux Yes CVE-2026-68188 21474-17084 21474-17084 Important 21474-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:41 <p>Information published.</p> 2.0 2026-08-14T18:32:58 <p>Information published.</p> 2.0 2026-08-14T18:32:58 <p>Information published.</p> 2.0 2026-08-14T18:33:01 <p>Information published.</p> Bluetooth: hci_sync: Protect UUID list traversal Mariner Linux Yes CVE-2026-68189 21474-17084 21474-17084 Moderate 21474-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:06:01 <p>Information published.</p> 2.0 2026-08-14T18:45:27 <p>Information published.</p> 2.0 2026-08-14T18:45:29 <p>Information published.</p> 2.0 2026-08-14T18:45:31 <p>Information published.</p> staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Mariner Linux Yes CVE-2026-68190 21474-17084 21474-17084 Moderate 21474-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:54:42 <p>Information published.</p> 1.0 2026-08-11T01:02:49 <p>Information published.</p> 2.0 2026-08-14T18:54:41 <p>Information published.</p> 2.0 2026-08-14T18:54:43 <p>Information published.</p> wifi: brcmfmac: make release_scratchbuffers idempotent Mariner Linux Yes CVE-2026-68192 21474-17084 21474-17084 Moderate 21474-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:20 <p>Information published.</p> 2.0 2026-08-14T18:24:37 <p>Information published.</p> 2.0 2026-08-14T18:24:38 <p>Information published.</p> 3.0 2026-08-14T18:24:44 <p>Information published.</p> wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Mariner Linux Yes CVE-2026-68194 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:49 <p>Information published.</p> 2.0 2026-08-14T18:12:47 <p>Information published.</p> 2.0 2026-08-14T18:12:48 <p>Information published.</p> 2.0 2026-08-14T18:12:49 <p>Information published.</p> wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Mariner Linux Yes CVE-2026-68195 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:32 <p>Information published.</p> 2.0 2026-08-14T18:07:36 <p>Information published.</p> 2.0 2026-08-14T18:07:29 <p>Information published.</p> 2.0 2026-08-14T18:07:34 <p>Information published.</p> wifi: wilc1000: validate assoc response length before subtracting header Mariner Linux Yes CVE-2026-68196 21474-17084 21474-17084 Moderate 21474-17084 6.3 6.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:19 <p>Information published.</p> 2.0 2026-08-14T18:49:51 <p>Information published.</p> 2.0 2026-08-14T18:49:52 <p>Information published.</p> 3.0 2026-08-14T18:49:53 <p>Information published.</p> wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Mariner Linux Yes CVE-2026-68197 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:09 <p>Information published.</p> 2.0 2026-08-14T19:10:30 <p>Information published.</p> 2.0 2026-08-14T19:10:32 <p>Information published.</p> 3.0 2026-08-14T19:10:38 <p>Information published.</p> wifi: ath6kl: fix use-after-free in aggr_reset_state() Mariner Linux Yes CVE-2026-68198 21684-17084 21684-17084 Critical 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:10:49 <p>Information published.</p> 2.0 2026-09-11T01:47:45 <p>Information published.</p> 3.0 2026-09-25T01:59:11 <p>Information published.</p> 4.0 2026-10-02T03:24:12 <p>Information published.</p> wifi: ath6kl: fix OOB access from firmware ADDBA window size Mariner Linux Yes CVE-2026-68199 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:02:24 <p>Information published.</p> 1.0 2026-08-11T01:12:18 <p>Information published.</p> 2.0 2026-08-14T19:02:20 <p>Information published.</p> 2.0 2026-08-14T19:02:23 <p>Information published.</p> ALSA: seq: close a re-opened queue timer in the destructor Mariner Linux Yes CVE-2026-68202 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:20:10 <p>Information published.</p> 1.0 2026-08-11T01:12:34 <p>Information published.</p> 3.0 2026-08-14T18:20:13 <p>Information published.</p> 2.0 2026-08-14T18:20:12 <p>Information published.</p> media: vivid: fix cleanup bugs in vivid_init() Mariner Linux Yes CVE-2026-68203 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:02:21 <p>Information published.</p> 3.0 2026-09-24T01:45:54 <p>Information published.</p> 4.0 2026-09-24T02:08:58 <p>Information published.</p> 2.0 2026-09-23T02:30:17 <p>Information published.</p> media: vivid: check for vb2_is_busy() when toggling caps Mariner Linux Yes CVE-2026-68204 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:29 <p>Information published.</p> 2.0 2026-08-14T19:52:54 <p>Information published.</p> 2.0 2026-08-14T19:52:59 <p>Information published.</p> 3.0 2026-08-14T19:53:05 <p>Information published.</p> media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Mariner Linux Yes CVE-2026-68205 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:11:04 <p>Information published.</p> 2.0 2026-09-11T01:46:37 <p>Information published.</p> 3.0 2026-10-02T03:12:38 <p>Information published.</p> media: v4l2-ctrls: validate HEVC active reference counts Mariner Linux Yes CVE-2026-68206 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:40 <p>Information published.</p> 2.0 2026-08-14T18:08:17 <p>Information published.</p> 3.0 2026-08-14T18:08:22 <p>Information published.</p> 3.0 2026-08-14T18:08:24 <p>Information published.</p> media: ti: vpe: unwind v4l2 device registration on probe error Mariner Linux Yes CVE-2026-68207 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:36 <p>Information published.</p> 2.0 2026-08-14T19:32:16 <p>Information published.</p> 2.0 2026-08-14T19:32:20 <p>Information published.</p> 3.0 2026-08-14T19:32:26 <p>Information published.</p> media: sun4i-csi: Return queued buffers on start_streaming() failure Mariner Linux Yes CVE-2026-68209 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T20:11:30 <p>Information published.</p> 1.0 2026-08-11T01:16:36 <p>Information published.</p> 2.0 2026-08-14T20:11:29 <p>Information published.</p> 2.0 2026-08-14T20:11:33 <p>Information published.</p> 3.0 2026-08-14T20:11:36 <p>Information published.</p> media: stm32: dcmi: unregister notifier on probe failure Mariner Linux Yes CVE-2026-68210 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:39:56 <p>Information published.</p> 1.0 2026-08-11T01:03:57 <p>Information published.</p> 2.0 2026-08-14T18:39:54 <p>Information published.</p> 2.0 2026-08-14T18:39:56 <p>Information published.</p> media: saa7134: Fix a possible memory leak in saa7134_video_init1 Mariner Linux Yes CVE-2026-68212 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:26 <p>Information published.</p> 2.0 2026-08-14T20:00:20 <p>Information published.</p> 2.0 2026-08-14T20:00:18 <p>Information published.</p> 2.0 2026-08-14T20:00:23 <p>Information published.</p> media: rtl2832: fix use-after-free in rtl2832_remove() Mariner Linux Yes CVE-2026-68214 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:22 <p>Information published.</p> 2.0 2026-08-14T20:09:12 <p>Information published.</p> 2.0 2026-08-14T20:09:17 <p>Information published.</p> 2.0 2026-08-14T20:09:18 <p>Information published.</p> 3.0 2026-08-14T20:09:19 <p>Information published.</p> 3.0 2026-08-14T20:09:20 <p>Information published.</p> media: radio-si476x: Unregister v4l2_device on probe failure Mariner Linux Yes CVE-2026-68215 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:40 <p>Information published.</p> 2.0 2026-08-14T19:27:03 <p>Information published.</p> 2.0 2026-08-14T19:26:59 <p>Information published.</p> 2.0 2026-08-14T19:27:00 <p>Information published.</p> media: pwc: Return queued buffers on start_streaming() failure Mariner Linux Yes CVE-2026-68216 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:53 <p>Information published.</p> 2.0 2026-08-14T18:52:45 <p>Information published.</p> 2.0 2026-08-14T18:52:44 <p>Information published.</p> 2.0 2026-08-14T18:52:46 <p>Information published.</p> media: pwc: Drain fill_buf on start_streaming() failure Mariner Linux Yes CVE-2026-68217 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:57 <p>Information published.</p> 2.0 2026-08-14T19:35:27 <p>Information published.</p> 3.0 2026-08-14T19:35:30 <p>Information published.</p> 3.0 2026-08-14T19:35:31 <p>Information published.</p> media: pci: dm1105: Free allocated workqueue Mariner Linux Yes CVE-2026-68218 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:36 <p>Information published.</p> 2.0 2026-08-14T18:15:47 <p>Information published.</p> 2.0 2026-08-14T18:15:49 <p>Information published.</p> 2.0 2026-08-14T18:15:50 <p>Information published.</p> media: nxp: imx8-isi: Fix potential out-of-bounds issues Mariner Linux Yes CVE-2026-68219 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:14 <p>Information published.</p> 2.0 2026-08-14T19:07:10 <p>Information published.</p> 2.0 2026-08-14T19:07:10 <p>Information published.</p> 2.0 2026-08-14T19:07:13 <p>Information published.</p> media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe Mariner Linux Yes CVE-2026-68220 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:09:08 <p>Information published.</p> 2.0 2026-08-14T18:09:09 <p>Information published.</p> 1.0 2026-08-11T01:09:56 <p>Information published.</p> 2.0 2026-08-14T18:09:08 <p>Information published.</p> media: msi2500: Return queued buffers on start_streaming() failure Mariner Linux Yes CVE-2026-68222 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:32 <p>Information published.</p> 2.0 2026-08-14T19:25:56 <p>Information published.</p> 2.0 2026-08-14T19:25:55 <p>Information published.</p> 2.0 2026-08-14T19:25:56 <p>Information published.</p> media: meson: vdec: Fix memory leak in error path of vdec_open Mariner Linux Yes CVE-2026-68223 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:21 <p>Information published.</p> 2.0 2026-08-14T19:38:31 <p>Information published.</p> 2.0 2026-08-14T19:38:34 <p>Information published.</p> 2.0 2026-08-14T19:38:35 <p>Information published.</p> media: cx23885: add ioremap return check and cleanup Mariner Linux Yes CVE-2026-68226 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:45:12 <p>Information published.</p> 3.0 2026-08-14T19:45:17 <p>Information published.</p> 1.0 2026-08-11T01:13:19 <p>Information published.</p> 2.0 2026-08-14T19:45:11 <p>Information published.</p> media: cedrus: skip invalid H.264 reference list entries Mariner Linux Yes CVE-2026-68229 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:56 <p>Information published.</p> 2.0 2026-08-14T20:13:30 <p>Information published.</p> 2.0 2026-08-14T20:13:31 <p>Information published.</p> 3.0 2026-08-14T20:13:38 <p>Information published.</p> media: airspy: Return queued buffers on start_streaming() failure Mariner Linux Yes CVE-2026-68231 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 3.0 2026-08-14T19:30:11 <p>Information published.</p> 1.0 2026-08-11T01:11:12 <p>Information published.</p> 2.0 2026-08-14T19:30:10 <p>Information published.</p> 2.0 2026-08-14T19:30:11 <p>Information published.</p> drm/vc4: Shut down BO cache timer before teardown Mariner Linux Yes CVE-2026-68233 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:29:09 <p>Information published.</p> 3.0 2026-09-24T02:06:22 <p>Information published.</p> 1.0 2026-08-11T01:16:58 <p>Information published.</p> 4.0 2026-09-24T02:48:01 <p>Information published.</p> drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved Mariner Linux Yes CVE-2026-68234 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 1.0 2026-08-11T01:09:55 <p>Information published.</p> drm/amd/display: dce100: skip non-DP stream encoders for DP MST Mariner Linux Yes CVE-2026-68235 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:03:32 <p>Information published.</p> drm/amd/display: set new_stream to NULL after release Mariner Linux Yes CVE-2026-68236 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:17 <p>Information published.</p> 2.0 2026-08-14T18:34:13 <p>Information published.</p> 2.0 2026-08-14T18:34:14 <p>Information published.</p> 3.0 2026-08-14T18:34:22 <p>Information published.</p> drm/amdgpu: Release VFCT ACPI table reference Mariner Linux Yes CVE-2026-68238 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:34:45 <p>Information published.</p> 4.0 2026-09-24T02:15:46 <p>Information published.</p> 1.0 2026-08-11T01:07:14 <p>Information published.</p> 3.0 2026-09-24T01:54:02 <p>Information published.</p> drm/i915/mst: limit DP MST ESI service loop Mariner Linux Yes CVE-2026-68241 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Security Update 21892-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-11T01:07:48 <p>Information published.</p> 2.0 2026-09-23T02:18:31 <p>Information published.</p> 3.0 2026-09-24T02:44:30 <p>Information published.</p> drm/i915/gt: Fix NULL deref on sched_engine alloc failure Mariner Linux Yes CVE-2026-68242 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:05:04 <p>Information published.</p> 2.0 2026-09-23T02:32:18 <p>Information published.</p> 3.0 2026-09-24T01:51:03 <p>Information published.</p> 4.0 2026-09-24T02:12:14 <p>Information published.</p> drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Mariner Linux Yes CVE-2026-68243 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:51:50 <p>Information published.</p> 2.0 2026-08-14T18:51:52 <p>Information published.</p> 1.0 2026-08-11T01:17:39 <p>Information published.</p> 2.0 2026-08-14T18:51:48 <p>Information published.</p> drm/i915/gem: Do not leak siblings[] on proto context error Mariner Linux Yes CVE-2026-68244 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:25 <p>Information published.</p> 2.0 2026-08-14T18:40:46 <p>Information published.</p> 2.0 2026-08-14T18:40:50 <p>Information published.</p> 2.0 2026-08-14T18:40:50 <p>Information published.</p> drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() Mariner Linux Yes CVE-2026-68245 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:15:45 <p>Information published.</p> drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68246 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:13:37 <p>Information published.</p> drm/i915/bios: range check LFP Data Block panel_type2 Mariner Linux Yes CVE-2026-68247 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T01:41:17 <p>Information published.</p> 4.0 2026-09-24T02:41:45 <p>Information published.</p> 1.0 2026-08-11T01:15:09 <p>Information published.</p> 2.0 2026-09-23T02:12:40 <p>Information published.</p> drm/i915: Return NULL on error in active_instance Mariner Linux Yes CVE-2026-68248 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:53 <p>Information published.</p> 2.0 2026-08-14T19:49:05 <p>Information published.</p> 2.0 2026-08-14T19:49:01 <p>Information published.</p> 3.0 2026-08-14T19:49:07 <p>Information published.</p> drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68249 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:08:21 <p>Information published.</p> drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68250 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:11:36 <p>Information published.</p> drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68251 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:17:47 <p>Information published.</p> drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() Mariner Linux Yes CVE-2026-68252 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:05:14 <p>Information published.</p> drm/i915/hdcp: check streams[] bounds before overflow Mariner Linux Yes CVE-2026-68253 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:15:25 <p>Information published.</p> 2.0 2026-09-11T01:46:47 <p>Information published.</p> 3.0 2026-09-25T01:50:26 <p>Information published.</p> 4.0 2026-10-02T03:14:08 <p>Information published.</p> drm/i915/vrr: require valid min/max vfreq for VRR Mariner Linux Yes CVE-2026-68254 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-09-25T01:55:59 <p>Information published.</p> 1.0 2026-08-11T01:07:04 <p>Information published.</p> 2.0 2026-09-11T01:47:18 <p>Information published.</p> 4.0 2026-10-02T03:19:54 <p>Information published.</p> drm/virtio: bound EDID block reads to the response buffer Mariner Linux Yes CVE-2026-68255 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:03 <p>Information published.</p> 2.0 2026-08-14T18:09:54 <p>Information published.</p> 3.0 2026-08-14T18:09:55 <p>Information published.</p> 2.0 2026-08-14T18:09:53 <p>Information published.</p> drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference Mariner Linux Yes CVE-2026-68256 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:05:01 <p>Information published.</p> 2.0 2026-08-14T18:42:39 <p>Information published.</p> 2.0 2026-08-14T18:42:40 <p>Information published.</p> 2.0 2026-08-14T18:42:42 <p>Information published.</p> drm/amdkfd: fix 32-bit overflow in CWSR total size calculation Mariner Linux Yes CVE-2026-68257 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:13:23 <p>Information published.</p> drm/amdkfd: Check bounds on CRIU restore queue type and mqd size Mariner Linux Yes CVE-2026-68258 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-11T01:02:22 <p>Information published.</p> 2.0 2026-09-23T02:13:57 <p>Information published.</p> 4.0 2026-09-24T02:42:28 <p>Information published.</p> 3.0 2026-09-24T01:42:48 <p>Information published.</p> drm/amdkfd: Check bounds in allocate_event_notification_slot Mariner Linux Yes CVE-2026-68259 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:11:20 <p>Information published.</p> drm/i915/gem: Add missing nospec on parallel submit slot Mariner Linux Yes CVE-2026-68269 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:35:26 <p>Information published.</p> 1.0 2026-08-11T01:14:25 <p>Information published.</p> 2.0 2026-08-14T18:35:22 <p>Information published.</p> 2.0 2026-08-14T18:35:21 <p>Information published.</p> drm/nouveau: fix reversed error cleanup order in ucopy functions Mariner Linux Yes CVE-2026-68271 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:49 <p>Information published.</p> 2.0 2026-08-14T20:12:52 <p>Information published.</p> 2.0 2026-08-14T20:12:59 <p>Information published.</p> 3.0 2026-08-14T20:13:01 <p>Information published.</p> drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Mariner Linux Yes CVE-2026-68272 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:00 <p>Information published.</p> 2.0 2026-08-14T18:49:17 <p>Information published.</p> 2.0 2026-08-14T18:49:14 <p>Information published.</p> 2.0 2026-08-14T18:49:19 <p>Information published.</p> drm/amdgpu: Fix context pstate override handling Mariner Linux Yes CVE-2026-68273 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21684-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21892-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 4.0 2026-09-24T02:42:48 <p>Information published.</p> 1.0 2026-08-11T01:03:03 <p>Information published.</p> 2.0 2026-09-23T02:14:41 <p>Information published.</p> 3.0 2026-09-24T01:43:27 <p>Information published.</p> drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Mariner Linux Yes CVE-2026-68277 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:18 <p>Information published.</p> 2.0 2026-08-14T18:10:40 <p>Information published.</p> 3.0 2026-08-14T18:10:46 <p>Information published.</p> 3.0 2026-08-14T18:10:45 <p>Information published.</p> drm/dp/mst: fix buffer overflows in sideband chunk accumulation Mariner Linux Yes CVE-2026-68278 21474-17084 21474-17084 Moderate 21474-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:03 <p>Information published.</p> 2.0 2026-08-14T18:54:58 <p>Information published.</p> 3.0 2026-08-14T18:55:05 <p>Information published.</p> 2.0 2026-08-14T18:54:55 <p>Information published.</p> drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Mariner Linux Yes CVE-2026-68279 21474-17084 21474-17084 Low 21474-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:07 <p>Information published.</p> 2.0 2026-08-14T19:06:13 <p>Information published.</p> 2.0 2026-08-14T19:06:11 <p>Information published.</p> 2.0 2026-08-14T19:06:07 <p>Information published.</p> drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Mariner Linux Yes CVE-2026-68280 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:34 <p>Information published.</p> 2.0 2026-08-14T18:11:24 <p>Information published.</p> 3.0 2026-08-14T18:11:31 <p>Information published.</p> 2.0 2026-08-14T18:11:26 <p>Information published.</p> bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() Mariner Linux Yes CVE-2026-68284 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:49 <p>Information published.</p> 2.0 2026-08-14T19:34:24 <p>Information published.</p> 2.0 2026-08-14T19:34:29 <p>Information published.</p> 3.0 2026-08-14T19:34:33 <p>Information published.</p> drop_monitor: perform u64_stats updates under IRQ-disabled section Mariner Linux Yes CVE-2026-68286 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-11T01:06:51 <p>Information published.</p> 2.0 2026-09-23T02:33:14 <p>Information published.</p> 4.0 2026-09-24T02:14:40 <p>Information published.</p> 3.0 2026-09-24T01:53:05 <p>Information published.</p> 5.0 2026-10-13T16:55:16 <p>Information published.</p> 6.0 2026-10-15T02:38:29 <p>Information published.</p> drop_monitor: fix size calculations for 64-bit attributes Mariner Linux Yes CVE-2026-68287 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Critical 21684-17084 Critical 21932-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:09:32 <p>Information published.</p> 4.0 2026-09-24T02:45:33 <p>Information published.</p> 2.0 2026-09-23T02:20:36 <p>Information published.</p> 3.0 2026-09-24T01:54:32 <p>Information published.</p> 5.0 2026-10-13T16:52:05 <p>Information published.</p> 6.0 2026-10-15T02:33:53 <p>Information published.</p> net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD Mariner Linux Yes CVE-2026-68288 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21684-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21892-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-11T01:04:50 <p>Information published.</p> 3.0 2026-09-24T01:46:06 <p>Information published.</p> 4.0 2026-09-24T02:43:49 <p>Information published.</p> 2.0 2026-09-23T02:16:06 <p>Information published.</p> 5.0 2026-10-13T16:50:31 <p>Information published.</p> 6.0 2026-10-15T02:32:15 <p>Information published.</p> tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Mariner Linux Yes CVE-2026-68289 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-11T01:04:52 <p>Information published.</p> 3.0 2026-09-24T01:49:47 <p>Information published.</p> 2.0 2026-09-23T02:31:14 <p>Information published.</p> 4.0 2026-09-24T02:10:27 <p>Information published.</p> 5.0 2026-10-13T16:53:38 <p>Information published.</p> 6.0 2026-10-15T02:37:05 <p>Information published.</p> net/mlx5: Fix MCIA register buffer overflow on 32 dword reads Mariner Linux Yes CVE-2026-68293 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 3.0 2026-09-24T02:05:25 <p>Information published.</p> 4.0 2026-09-24T02:47:50 <p>Information published.</p> 1.0 2026-08-11T01:14:59 <p>Information published.</p> 2.0 2026-09-23T02:28:44 <p>Information published.</p> net: qrtr: restrict socket creation to the initial network namespace Mariner Linux Yes CVE-2026-68294 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:36:26 <p>Information published.</p> 1.0 2026-08-11T01:14:33 <p>Information published.</p> 2.0 2026-08-14T18:36:20 <p>Information published.</p> 2.0 2026-08-14T18:36:21 <p>Information published.</p> tipc: fix u16 MTU truncation in media and bearer MTU validation Mariner Linux Yes CVE-2026-68297 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:09 <p>Information published.</p> 2.0 2026-08-14T18:05:17 <p>Information published.</p> 2.0 2026-08-14T18:05:21 <p>Information published.</p> vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Mariner Linux Yes CVE-2026-68299 21474-17084 21474-17084 Moderate 21474-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:13 <p>Information published.</p> 2.0 2026-08-14T19:00:26 <p>Information published.</p> 2.0 2026-08-14T19:00:29 <p>Information published.</p> 2.0 2026-08-14T19:00:29 <p>Information published.</p> sctp: auth: verify auth requirement when auth_chunk is NULL Mariner Linux Yes CVE-2026-68300 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:59 <p>Information published.</p> 2.0 2026-08-14T19:43:19 <p>Information published.</p> 2.0 2026-08-14T19:43:22 <p>Information published.</p> 3.0 2026-08-14T19:43:27 <p>Information published.</p> net: hsr: fix memory leak on slave unregistration by removing synced VLANs Mariner Linux Yes CVE-2026-68301 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:15 <p>Information published.</p> 2.0 2026-08-14T18:29:25 <p>Information published.</p> 2.0 2026-08-14T18:29:24 <p>Information published.</p> amt: re-read skb header pointers after every pull Mariner Linux Yes CVE-2026-68302 21474-17084 21474-17084 Low 21474-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:06:51 <p>Information published.</p> 2.0 2026-08-14T18:48:16 <p>Information published.</p> 2.0 2026-08-14T18:48:14 <p>Information published.</p> 2.0 2026-08-14T18:48:19 <p>Information published.</p> drm/vc4: hvs/v3d: Fix null dereference in unbind Mariner Linux Yes CVE-2026-68303 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-09-23T02:25:13 <p>Information published.</p> 4.0 2026-09-24T02:46:33 <p>Information published.</p> 1.0 2026-08-11T01:12:01 <p>Information published.</p> 3.0 2026-09-24T02:00:20 <p>Information published.</p> wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Mariner Linux Yes CVE-2026-68304 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:59 <p>Information published.</p> 2.0 2026-08-14T18:53:50 <p>Information published.</p> 2.0 2026-08-14T18:53:44 <p>Information published.</p> 2.0 2026-08-14T18:53:42 <p>Information published.</p> wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Mariner Linux Yes CVE-2026-68306 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:43 <p>Information published.</p> 2.0 2026-08-14T19:12:07 <p>Information published.</p> 2.0 2026-08-14T19:12:09 <p>Information published.</p> 2.0 2026-08-14T19:12:09 <p>Information published.</p> wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Mariner Linux Yes CVE-2026-68308 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:04:51 <p>Information published.</p> 2.0 2026-08-14T19:04:56 <p>Information published.</p> 2.0 2026-08-14T19:04:55 <p>Information published.</p> 1.0 2026-08-11T01:06:02 <p>Information published.</p> wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Mariner Linux Yes CVE-2026-68309 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:37 <p>Information published.</p> 2.0 2026-08-14T19:47:08 <p>Information published.</p> 2.0 2026-08-14T19:47:03 <p>Information published.</p> 2.0 2026-08-14T19:47:11 <p>Information published.</p> wifi: mt76: mt7915: guard HE capability lookups Mariner Linux Yes CVE-2026-68310 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:45 <p>Information published.</p> 2.0 2026-08-14T19:48:14 <p>Information published.</p> 2.0 2026-08-14T19:48:07 <p>Information published.</p> 2.0 2026-08-14T19:48:09 <p>Information published.</p> cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Mariner Linux Yes CVE-2026-68312 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:18:49 <p>Information published.</p> 4.0 2026-09-24T02:44:49 <p>Information published.</p> 1.0 2026-08-11T01:08:45 <p>Information published.</p> 3.0 2026-09-24T01:52:21 <p>Information published.</p> tipc: fix infinite loop in __tipc_nl_compat_dumpit Mariner Linux Yes CVE-2026-68313 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:12 <p>Information published.</p> 2.0 2026-08-14T18:48:56 <p>Information published.</p> 3.0 2026-08-14T18:49:01 <p>Information published.</p> 3.0 2026-08-14T18:49:00 <p>Information published.</p> sctp: validate stream count in sctp_process_strreset_inreq() Mariner Linux Yes CVE-2026-68315 21474-17084 21474-17084 Moderate 21474-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:09:44 <p>Information published.</p> 1.0 2026-08-11T01:07:57 <p>Information published.</p> 2.0 2026-08-14T19:09:46 <p>Information published.</p> 2.0 2026-08-14T19:09:49 <p>Information published.</p> pds_core: fix auxiliary device add/del races Mariner Linux Yes CVE-2026-68317 21474-17084 21474-17084 Moderate 21474-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:19:22 <p>Information published.</p> 2.0 2026-08-14T18:19:26 <p>Information published.</p> 1.0 2026-08-11T01:12:26 <p>Information published.</p> 2.0 2026-08-14T18:19:23 <p>Information published.</p> pds_core: fix use-after-free on workqueue during remove Mariner Linux Yes CVE-2026-68318 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Important 21684-17084 Important 21892-17084 Important 21932-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 4.0 2026-09-24T02:40:58 <p>Information published.</p> 1.0 2026-08-11T01:10:11 <p>Information published.</p> 2.0 2026-09-23T02:09:34 <p>Information published.</p> 3.0 2026-09-24T01:39:30 <p>Information published.</p> sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Mariner Linux Yes CVE-2026-68320 21474-17084 21474-17084 Important 21474-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:03:17 <p>Information published.</p> 2.0 2026-08-14T19:03:20 <p>Information published.</p> 1.0 2026-08-11T01:12:27 <p>Information published.</p> 2.0 2026-08-14T19:03:21 <p>Information published.</p> rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Mariner Linux Yes CVE-2026-68322 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-11T01:16:17 <p>Information published.</p> 2.0 2026-09-11T01:48:12 <p>Information published.</p> 3.0 2026-09-25T02:07:09 <p>Information published.</p> 4.0 2026-10-02T03:31:17 <p>Information published.</p> tipc: serialize udp bearer replicast list updates Mariner Linux Yes CVE-2026-68323 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.3 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 6.3 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 6.3 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:04:00 <p>Information published.</p> 3.0 2026-09-24T01:47:48 <p>Information published.</p> 4.0 2026-09-24T02:09:43 <p>Information published.</p> 2.0 2026-09-23T02:30:39 <p>Information published.</p> iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Mariner Linux Yes CVE-2026-68324 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:21 <p>Information published.</p> 2.0 2026-08-14T18:37:04 <p>Information published.</p> 2.0 2026-08-14T18:37:04 <p>Information published.</p> 2.0 2026-08-14T18:37:05 <p>Information published.</p> iommu/amd: Bound the early ACPI HID map Mariner Linux Yes CVE-2026-68325 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:43 <p>Information published.</p> 2.0 2026-08-14T20:12:14 <p>Information published.</p> 2.0 2026-08-14T20:12:19 <p>Information published.</p> 3.0 2026-08-14T20:12:25 <p>Information published.</p> 3.0 2026-08-14T20:12:20 <p>Information published.</p> wifi: mwifiex: bound uAP association event IEs to the event buffer Mariner Linux Yes CVE-2026-68326 21474-17084 21474-17084 Moderate 21474-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:06 <p>Information published.</p> 2.0 2026-08-14T18:37:22 <p>Information published.</p> 3.0 2026-08-14T18:37:29 <p>Information published.</p> 3.0 2026-08-14T18:37:28 <p>Information published.</p> wan: wanxl: Only reset hardware after BAR mapping Mariner Linux Yes CVE-2026-68327 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 3.0 2026-08-14T20:10:31 <p>Information published.</p> 1.0 2026-08-11T01:16:29 <p>Information published.</p> 2.0 2026-08-14T20:10:27 <p>Information published.</p> 2.0 2026-08-14T20:10:30 <p>Information published.</p> 3.0 2026-08-14T20:10:38 <p>Information published.</p> 4.0 2026-08-14T20:10:40 <p>Information published.</p> nfp: Check resource mutex allocation Mariner Linux Yes CVE-2026-68328 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:52 <p>Information published.</p> 2.0 2026-08-14T18:17:15 <p>Information published.</p> 2.0 2026-08-14T18:17:16 <p>Information published.</p> 3.0 2026-08-14T18:17:20 <p>Information published.</p> iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Mariner Linux Yes CVE-2026-68329 21474-17084 21474-17084 Moderate 21474-17084 7.0 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:59 <p>Information published.</p> 2.0 2026-08-14T18:28:12 <p>Information published.</p> 3.0 2026-08-14T18:28:18 <p>Information published.</p> dpaa2-eth: put MAC endpoint device on disconnect Mariner Linux Yes CVE-2026-68331 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:41 <p>Information published.</p> 2.0 2026-08-14T18:12:05 <p>Information published.</p> 2.0 2026-08-14T18:12:05 <p>Information published.</p> 2.0 2026-08-14T18:12:08 <p>Information published.</p> dpaa2-switch: put MAC endpoint device on disconnect Mariner Linux Yes CVE-2026-68333 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:07:51 <p>Information published.</p> 1.0 2026-08-11T01:07:02 <p>Information published.</p> 2.0 2026-08-14T19:07:54 <p>Information published.</p> 3.0 2026-08-14T19:07:57 <p>Information published.</p> rds: drop incoming messages that cross network namespace boundaries Mariner Linux Yes CVE-2026-68335 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:09 <p>Information published.</p> 2.0 2026-08-14T19:51:02 <p>Information published.</p> 2.0 2026-08-14T19:50:58 <p>Information published.</p> 2.0 2026-08-14T19:51:01 <p>Information published.</p> bonding: fix devconf_all NULL dereference when IPv6 is disabled Mariner Linux Yes CVE-2026-68336 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:23:10 <p>Information published.</p> 2.0 2026-08-14T18:23:12 <p>Information published.</p> 1.0 2026-08-11T01:13:04 <p>Information published.</p> 2.0 2026-08-14T18:23:13 <p>Information published.</p> bpf: Reject redirect helpers without a bpf_net_context Mariner Linux Yes CVE-2026-68337 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 7.3 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H/E:U 21684-17084 7.3 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H/E:U 21892-17084 7.3 6.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:08:59 <p>Information published.</p> 2.0 2026-09-23T02:08:16 <p>Information published.</p> 4.0 2026-09-24T02:40:35 <p>Information published.</p> 3.0 2026-09-24T01:38:05 <p>Information published.</p> net/packet: avoid fanout hook re-registration after unregister Mariner Linux Yes CVE-2026-68338 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:13:40 <p>Information published.</p> 1.0 2026-08-11T01:09:05 <p>Information published.</p> 2.0 2026-08-14T19:13:45 <p>Information published.</p> 3.0 2026-08-14T19:13:43 <p>Information published.</p> Bluetooth: btusb: validate Realtek vendor event length Mariner Linux Yes CVE-2026-68339 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:44:09 <p>Information published.</p> 1.0 2026-08-11T01:16:08 <p>Information published.</p> 2.0 2026-08-14T18:44:06 <p>Information published.</p> 3.0 2026-08-14T18:44:15 <p>Information published.</p> hwmon: occ: validate poll response sensor blocks Mariner Linux Yes CVE-2026-68340 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:41:15 <p>Information published.</p> 1.0 2026-08-11T01:15:37 <p>Information published.</p> 2.0 2026-08-14T18:41:10 <p>Information published.</p> 2.0 2026-08-14T18:41:14 <p>Information published.</p> smb: client: validate DFS referral PathConsumed Mariner Linux Yes CVE-2026-68343 21474-17084 21474-17084 Moderate 21474-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:43:12 <p>Information published.</p> 2.0 2026-08-14T18:43:16 <p>Information published.</p> 1.0 2026-08-11T01:16:00 <p>Information published.</p> 2.0 2026-08-14T18:43:11 <p>Information published.</p> ASoC: tas2781: bound firmware description string parsing Mariner Linux Yes CVE-2026-68348 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:05:37 <p>Information published.</p> 3.0 2026-08-14T18:44:36 <p>Information published.</p> 2.0 2026-08-14T18:44:32 <p>Information published.</p> 2.0 2026-08-14T18:44:32 <p>Information published.</p> wifi: carl9170: fix buffer overflow in rx_stream failover path Mariner Linux Yes CVE-2026-68349 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:44 <p>Information published.</p> 3.0 2026-08-14T19:55:29 <p>Information published.</p> 2.0 2026-08-14T19:55:28 <p>Information published.</p> 3.0 2026-08-14T19:55:36 <p>Information published.</p> wifi: carl9170: fix OOB read from off-by-two in TX status handler Mariner Linux Yes CVE-2026-68350 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:54 <p>Information published.</p> 2.0 2026-08-14T19:12:57 <p>Information published.</p> 2.0 2026-08-14T19:12:56 <p>Information published.</p> 3.0 2026-08-14T19:13:02 <p>Information published.</p> wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Mariner Linux Yes CVE-2026-68351 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:06:15 <p>Information published.</p> 2.0 2026-08-14T19:05:48 <p>Information published.</p> 2.0 2026-08-14T19:05:51 <p>Information published.</p> 2.0 2026-08-14T19:05:51 <p>Information published.</p> wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Mariner Linux Yes CVE-2026-68352 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:06:39 <p>Information published.</p> 3.0 2026-08-14T18:47:24 <p>Information published.</p> 3.0 2026-08-14T18:47:26 <p>Information published.</p> 2.0 2026-08-14T18:47:22 <p>Information published.</p> wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Mariner Linux Yes CVE-2026-68353 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:05:25 <p>Information published.</p> 2.0 2026-08-14T18:43:35 <p>Information published.</p> 2.0 2026-08-14T18:43:33 <p>Information published.</p> 2.0 2026-08-14T18:43:39 <p>Information published.</p> firewire: net: Fix fragmented datagram reassembly Mariner Linux Yes CVE-2026-68354 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:12 <p>Information published.</p> 2.0 2026-08-14T18:23:55 <p>Information published.</p> 3.0 2026-08-14T18:23:57 <p>Information published.</p> 3.0 2026-08-14T18:23:59 <p>Information published.</p> wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Mariner Linux Yes CVE-2026-68355 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:06:41 <p>Information published.</p> 2.0 2026-08-14T18:06:46 <p>Information published.</p> 1.0 2026-08-11T01:09:25 <p>Information published.</p> 2.0 2026-08-14T18:06:46 <p>Information published.</p> watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Mariner Linux Yes CVE-2026-68357 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:36 <p>Information published.</p> 2.0 2026-08-14T19:40:29 <p>Information published.</p> 2.0 2026-08-14T19:40:32 <p>Information published.</p> 2.0 2026-08-14T19:40:33 <p>Information published.</p> hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Mariner Linux Yes CVE-2026-68359 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:52 <p>Information published.</p> 2.0 2026-08-14T18:48:02 <p>Information published.</p> 2.0 2026-08-14T18:48:02 <p>Information published.</p> 2.0 2026-08-14T18:48:04 <p>Information published.</p> hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Mariner Linux Yes CVE-2026-68360 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:03 <p>Information published.</p> 2.0 2026-08-14T18:36:06 <p>Information published.</p> 2.0 2026-08-14T18:36:11 <p>Information published.</p> 2.0 2026-08-14T18:36:12 <p>Information published.</p> hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Mariner Linux Yes CVE-2026-68361 21474-17084 21474-17084 Moderate 21474-17084 6.3 5.8 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:29 <p>Information published.</p> 2.0 2026-08-14T18:40:13 <p>Information published.</p> 3.0 2026-08-14T18:40:22 <p>Information published.</p> 2.0 2026-08-14T18:40:11 <p>Information published.</p> wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Mariner Linux Yes CVE-2026-68362 21474-17084 21474-17084 Moderate 21474-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:07:46 <p>Information published.</p> 2.0 2026-08-14T19:08:47 <p>Information published.</p> 2.0 2026-08-14T19:08:47 <p>Information published.</p> 2.0 2026-08-14T19:08:51 <p>Information published.</p> wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Mariner Linux Yes CVE-2026-68363 21474-17084 21474-17084 Low 21474-17084 2.0 2.0 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:27 <p>Information published.</p> 2.0 2026-08-14T19:00:10 <p>Information published.</p> 3.0 2026-08-14T19:00:18 <p>Information published.</p> 2.0 2026-08-14T19:00:11 <p>Information published.</p> drm/amd/display: Fix ISM dc_lock deadlock during suspend Mariner Linux Yes CVE-2026-68364 21684-17084 21684-17084 Critical 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 1.0 2026-08-11T01:12:18 <p>Information published.</p> USB: serial: io_edgeport: cap received transmit credits Mariner Linux Yes CVE-2026-68365 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:06:27 <p>Information published.</p> 2.0 2026-08-14T19:06:48 <p>Information published.</p> 2.0 2026-08-14T19:06:46 <p>Information published.</p> 2.0 2026-08-14T19:06:49 <p>Information published.</p> usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer Mariner Linux Yes CVE-2026-68366 21474-17084 21474-17084 Important 21474-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:47 <p>Information published.</p> 2.0 2026-08-14T18:53:56 <p>Information published.</p> 2.0 2026-08-14T18:53:59 <p>Information published.</p> 3.0 2026-08-14T18:54:02 <p>Information published.</p> usb: gadget: f_tcm: synchronize delayed set_alt with teardown Mariner Linux Yes CVE-2026-68367 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:48:04 <p>Information published.</p> 1.0 2026-08-11T01:13:53 <p>Information published.</p> 3.0 2026-09-25T02:06:08 <p>Information published.</p> 4.0 2026-10-02T03:29:54 <p>Information published.</p> usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() Mariner Linux Yes CVE-2026-68368 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:52 <p>Information published.</p> 2.0 2026-08-14T18:27:33 <p>Information published.</p> 2.0 2026-08-14T18:27:35 <p>Information published.</p> 3.0 2026-08-14T18:27:43 <p>Information published.</p> usb: gadget: printer: fix infinite loop in printer_read() Mariner Linux Yes CVE-2026-68369 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:09 <p>Information published.</p> 2.0 2026-08-14T19:01:21 <p>Information published.</p> 2.0 2026-08-14T19:01:26 <p>Information published.</p> 2.0 2026-08-14T19:01:23 <p>Information published.</p> usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback Mariner Linux Yes CVE-2026-68370 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:17:03 <p>Information published.</p> 2.0 2026-08-14T20:14:10 <p>Information published.</p> 3.0 2026-08-14T20:14:12 <p>Information published.</p> 3.0 2026-08-14T20:14:14 <p>Information published.</p> 2.0 2026-08-14T20:14:11 <p>Information published.</p> 3.0 2026-08-14T20:14:18 <p>Information published.</p> usb: musb: omap2430: Do not put borrowed of_node in probe Mariner Linux Yes CVE-2026-68371 21684-17084 21684-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:47:36 <p>Information published.</p> 3.0 2026-09-25T01:58:32 <p>Information published.</p> 1.0 2026-08-11T01:09:23 <p>Information published.</p> 4.0 2026-10-02T03:22:40 <p>Information published.</p> wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() Mariner Linux Yes CVE-2026-68373 21474-17084 21474-17084 Moderate 21474-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:16:31 <p>Information published.</p> 2.0 2026-08-14T18:45:06 <p>Information published.</p> 2.0 2026-08-14T18:45:07 <p>Information published.</p> 3.0 2026-08-14T18:45:15 <p>Information published.</p> usb: core: sysfs: add lock to bos_descriptors_read() Mariner Linux Yes CVE-2026-68374 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 1.0 2026-08-11T01:05:28 <p>Information published.</p> sctp: fix auth_hmacs array size in struct sctp_cookie Mariner Linux Yes CVE-2026-68376 21474-17084 21474-17084 Low 21474-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:36 <p>Information published.</p> 2.0 2026-08-14T19:54:15 <p>Information published.</p> 2.0 2026-08-14T19:54:12 <p>Information published.</p> 2.0 2026-08-14T19:54:20 <p>Information published.</p> net/sched: act_tunnel_key: Defer dst_release to RCU callback Mariner Linux Yes CVE-2026-68377 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:57 <p>Information published.</p> 2.0 2026-08-14T20:05:28 <p>Information published.</p> 2.0 2026-08-14T20:05:27 <p>Information published.</p> 2.0 2026-08-14T20:05:36 <p>Information published.</p> 3.0 2026-08-14T20:05:49 <p>Information published.</p> ksmbd: pin conn during async oplock break notification Mariner Linux Yes CVE-2026-68381 21474-17084 21474-17084 Moderate 21474-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:34 <p>Information published.</p> 2.0 2026-08-14T20:01:39 <p>Information published.</p> 2.0 2026-08-14T20:01:37 <p>Information published.</p> 2.0 2026-08-14T20:01:46 <p>Information published.</p> bpf, sockmap: Reject unhashed UDP sockets on sockmap update Mariner Linux Yes CVE-2026-68386 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:26 <p>Information published.</p> 2.0 2026-08-14T19:46:05 <p>Information published.</p> 3.0 2026-08-14T19:46:12 <p>Information published.</p> 3.0 2026-08-14T19:46:11 <p>Information published.</p> smb/client: handle overlapping allocated ranges in fallocate Mariner Linux Yes CVE-2026-68388 21474-17084 21474-17084 Moderate 21474-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:38 <p>Information published.</p> 2.0 2026-08-14T18:41:40 <p>Information published.</p> 3.0 2026-08-14T18:41:46 <p>Information published.</p> 4.0 2026-08-14T18:41:49 <p>Information published.</p> Bluetooth: hci_qca: Clear memdump state on invalid dump size Mariner Linux Yes CVE-2026-68389 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:16 <p>Information published.</p> 2.0 2026-08-14T19:23:46 <p>Information published.</p> 2.0 2026-08-14T19:23:47 <p>Information published.</p> 2.0 2026-08-14T19:23:46 <p>Information published.</p> Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Mariner Linux Yes CVE-2026-68391 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:06:27 <p>Information published.</p> 2.0 2026-08-14T18:46:23 <p>Information published.</p> 2.0 2026-08-14T18:46:27 <p>Information published.</p> 3.0 2026-08-14T18:46:30 <p>Information published.</p> Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Mariner Linux Yes CVE-2026-68392 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:51 <p>Information published.</p> 2.0 2026-08-14T19:42:28 <p>Information published.</p> 2.0 2026-08-14T19:42:24 <p>Information published.</p> 3.0 2026-08-14T19:42:28 <p>Information published.</p> ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered Mariner Linux Yes CVE-2026-68395 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:06 <p>Information published.</p> 2.0 2026-08-14T18:52:04 <p>Information published.</p> 2.0 2026-08-14T18:52:01 <p>Information published.</p> 2.0 2026-08-14T18:52:08 <p>Information published.</p> scsi: core: wake eh reliably when using scsi_schedule_eh Mariner Linux Yes CVE-2026-68396 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:14:29 <p>Information published.</p> 2.0 2026-09-23T02:10:32 <p>Information published.</p> 3.0 2026-09-24T01:40:45 <p>Information published.</p> 4.0 2026-09-24T02:41:18 <p>Information published.</p> net/iucv: take a reference on the socket found in afiucv_hs_rcv() Mariner Linux Yes CVE-2026-68397 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T19:11:20 <p>Information published.</p> 1.0 2026-08-11T01:08:32 <p>Information published.</p> 2.0 2026-08-14T19:11:21 <p>Information published.</p> 2.0 2026-08-14T19:11:24 <p>Information published.</p> ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF Mariner Linux Yes CVE-2026-68398 21474-17084 21474-17084 Moderate 21474-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:41 <p>Information published.</p> 2.0 2026-08-12T14:41:36 <p>Information published.</p> 3.0 2026-08-14T18:58:38 <p>Information published.</p> 3.0 2026-08-14T18:58:43 <p>Information published.</p> 3.0 2026-08-14T18:58:40 <p>Information published.</p> bpf: Fix UAF in sock clone early bailouts Mariner Linux Yes CVE-2026-68399 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Critical 21684-17084 Critical 21932-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-11T01:04:11 <p>Information published.</p> 2.0 2026-09-23T02:15:37 <p>Information published.</p> 3.0 2026-09-24T01:45:20 <p>Information published.</p> 4.0 2026-09-24T02:43:27 <p>Information published.</p> firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Mariner Linux Yes CVE-2026-68401 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:15:17 <p>Information published.</p> 4.0 2026-09-24T02:42:04 <p>Information published.</p> 2.0 2026-09-23T02:13:36 <p>Information published.</p> 3.0 2026-09-24T01:42:02 <p>Information published.</p> wifi: cfg80211: bound element ID read when checking non-inheritance Mariner Linux Yes CVE-2026-68402 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:14:01 <p>Information published.</p> 2.0 2026-08-14T19:08:13 <p>Information published.</p> 2.0 2026-08-14T19:08:11 <p>Information published.</p> 2.0 2026-08-14T19:08:12 <p>Information published.</p> wifi: brcmfmac: initialize SDIO data work before cleanup Mariner Linux Yes CVE-2026-68403 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:09:31 <p>Information published.</p> 2.0 2026-08-14T19:16:06 <p>Information published.</p> 3.0 2026-08-14T19:16:10 <p>Information published.</p> 3.0 2026-08-14T19:16:12 <p>Information published.</p> wifi: cfg80211: use wiphy work for socket owner autodisconnect Mariner Linux Yes CVE-2026-68404 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Security Update 21892-17084 1.0 2026-08-11T01:11:52 <p>Information published.</p> 2.0 2026-09-23T02:24:46 <p>Information published.</p> 3.0 2026-09-24T02:46:16 <p>Information published.</p> wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock Mariner Linux Yes CVE-2026-68405 21474-17084 21474-17084 Moderate 21474-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:01 <p>Information published.</p> 3.0 2026-08-14T19:21:42 <p>Information published.</p> 2.0 2026-08-14T19:21:38 <p>Information published.</p> 2.0 2026-08-14T19:21:33 <p>Information published.</p> wifi: cfg80211: validate PMSR FTM preamble range Mariner Linux Yes CVE-2026-68406 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:28 <p>Information published.</p> 3.0 2026-08-14T19:39:36 <p>Information published.</p> 2.0 2026-08-14T19:39:26 <p>Information published.</p> 3.0 2026-08-14T19:39:35 <p>Information published.</p> wifi: nl80211: free RNR data on MBSSID mismatch Mariner Linux Yes CVE-2026-68407 21474-17084 21474-17084 Critical 21474-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:03:46 <p>Information published.</p> 2.0 2026-08-14T18:58:25 <p>Information published.</p> 3.0 2026-08-14T18:58:27 <p>Information published.</p> 3.0 2026-08-14T18:58:30 <p>Information published.</p> wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Mariner Linux Yes CVE-2026-68408 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-09-23T14:34:30 <p>Information published.</p> 3.0 2026-09-24T01:57:02 <p>Information published.</p> 4.0 2026-09-24T02:45:55 <p>Information published.</p> 1.0 2026-08-11T01:11:44 <p>Information published.</p> 5.0 2026-10-24T14:44:18 <p>Information published.</p> wifi: mac80211: defer link RX stats percpu free to RCU Mariner Linux Yes CVE-2026-68409 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.8 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.8 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.8 4.8 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:12:50 <p>Information published.</p> 2.0 2026-09-10T03:31:58 <p>Information published.</p> 3.0 2026-09-23T02:26:43 <p>Information published.</p> 5.0 2026-09-24T02:47:07 <p>Information published.</p> 4.0 2026-09-24T02:02:59 <p>Information published.</p> wifi: libertas: fix memory leak in helper_firmware_cb() Mariner Linux Yes CVE-2026-68410 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:03 <p>Information published.</p> 2.0 2026-08-14T19:56:32 <p>Information published.</p> 2.0 2026-08-14T19:56:37 <p>Information published.</p> 3.0 2026-08-14T19:56:41 <p>Information published.</p> wifi: mac80211_hwsim: clamp virtio RX length before skb_put Mariner Linux Yes CVE-2026-68411 21474-17084 21474-17084 Moderate 21474-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:05:51 <p>Information published.</p> 3.0 2026-08-14T19:04:02 <p>Information published.</p> 2.0 2026-08-14T19:03:53 <p>Information published.</p> 2.0 2026-08-14T19:03:57 <p>Information published.</p> wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() Mariner Linux Yes CVE-2026-68412 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:03:17 <p>Information published.</p> 4.0 2026-09-24T02:43:08 <p>Information published.</p> 2.0 2026-09-23T02:15:16 <p>Information published.</p> 3.0 2026-09-24T01:44:25 <p>Information published.</p> wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Mariner Linux Yes CVE-2026-68413 21474-17084 21474-17084 Low 21474-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:33 <p>Information published.</p> 2.0 2026-08-12T14:41:31 <p>Information published.</p> 3.0 2026-08-14T18:57:43 <p>Information published.</p> 4.0 2026-08-14T18:57:48 <p>Information published.</p> 4.0 2026-08-14T18:57:49 <p>Information published.</p> wifi: cfg80211: cancel sched scan results work on unregister Mariner Linux Yes CVE-2026-68414 21474-17084 21474-17084 Moderate 21474-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:23 <p>Information published.</p> 2.0 2026-08-14T19:24:52 <p>Information published.</p> 2.0 2026-08-14T19:24:51 <p>Information published.</p> 2.0 2026-08-14T19:24:50 <p>Information published.</p> mtd: fix double free and WARN_ON in add_mtd_device() error paths Mariner Linux Yes CVE-2026-68416 21474-17084 21474-17084 Important 21474-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:15:33 <p>Information published.</p> 2.0 2026-08-14T18:32:15 <p>Information published.</p> 2.0 2026-08-14T18:32:17 <p>Information published.</p> 2.0 2026-08-14T18:32:15 <p>Information published.</p> RDMA/siw: publish QP after initialization Mariner Linux Yes CVE-2026-68417 21474-17084 21474-17084 Low 21474-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:18:40 <p>Information published.</p> 2.0 2026-08-14T18:18:44 <p>Information published.</p> 1.0 2026-08-11T01:12:09 <p>Information published.</p> RDMA/irdma: Prevent user-triggered null deref on QP create Mariner Linux Yes CVE-2026-68418 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 1.0 2026-08-11T01:14:41 <p>Information published.</p> 2.0 2026-09-20T01:52:28 <p>Information published.</p> 3.0 2026-09-23T02:27:55 <p>Information published.</p> 4.0 2026-09-24T02:04:40 <p>Information published.</p> 5.0 2026-09-24T02:47:36 <p>Information published.</p> RDMA/irdma: Prevent rereg_mr for non-mem regions Mariner Linux Yes CVE-2026-68419 21474-17084 21474-17084 Moderate 21474-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:12:49 <p>Information published.</p> 2.0 2026-08-14T18:21:41 <p>Information published.</p> 2.0 2026-08-14T18:21:39 <p>Information published.</p> 2.0 2026-08-14T18:21:39 <p>Information published.</p> btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Mariner Linux Yes CVE-2026-68422 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:11:27 <p>Information published.</p> 2.0 2026-08-14T19:31:10 <p>Information published.</p> 2.0 2026-08-14T19:31:10 <p>Information published.</p> 2.0 2026-08-14T19:31:15 <p>Information published.</p> IB/mad: Drop unmatched RMPP responses before reassembly Mariner Linux Yes CVE-2026-68425 21474-17084 21474-17084 Moderate 21474-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:13:08 <p>Information published.</p> 3.0 2026-08-14T19:44:21 <p>Information published.</p> 2.0 2026-08-14T19:44:15 <p>Information published.</p> 3.0 2026-08-14T19:44:22 <p>Information published.</p> xfrm: fix stale skb->prev after async crypto steals a GSO segment Mariner Linux Yes CVE-2026-68426 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-11T01:12:42 <p>Information published.</p> 2.0 2026-09-23T02:26:26 <p>Information published.</p> 3.0 2026-09-24T02:01:21 <p>Information published.</p> 4.0 2026-09-24T02:46:49 <p>Information published.</p> gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Mariner Linux Yes CVE-2026-68427 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-11T01:07:15 <p>Information published.</p> KVM: x86/mmu: Fix use-after-free on vendor module reload Mariner Linux Yes CVE-2026-68428 21474-17084 21474-17084 Moderate 21474-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-11T01:10:26 <p>Information published.</p> 2.0 2026-08-12T14:41:25 <p>Information published.</p> 3.0 2026-08-14T18:56:45 <p>Information published.</p> 3.0 2026-08-14T18:56:50 <p>Information published.</p> 4.0 2026-08-14T18:56:51 <p>Information published.</p> drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() Mariner Linux Yes CVE-2026-68429 21474-17084 21474-17084 Low 21474-17084 1.8 1.8 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-08-14T18:58:07 <p>Information published.</p> 1.0 2026-08-14T18:57:46 <p>Information published.</p> drm/amdgpu/gfx8: drop unecessary BUG_ON() Mariner Linux Yes CVE-2026-68430 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-14T18:40:41 <p>Information published.</p> vxlan: require CAP_NET_ADMIN in the device netns for changelink Mariner Linux Yes CVE-2026-68432 21474-17084 21474-17084 Moderate 21474-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:56:59 <p>Information published.</p> libceph: bound get_version reply decode to front len Mariner Linux Yes CVE-2026-68433 21474-17084 21474-17084 Low 21474-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:56:06 <p>Information published.</p> 2.0 2026-08-14T18:56:24 <p>Information published.</p> drm/amd/display: use kvzalloc to allocate struct dc Mariner Linux Yes CVE-2026-68436 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-14T18:42:09 <p>Information published.</p> net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains Mariner Linux Yes CVE-2026-68441 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-14T18:37:54 <p>Information published.</p> 2.0 2026-09-23T02:35:42 <p>Information published.</p> 4.0 2026-09-24T02:16:58 <p>Information published.</p> 3.0 2026-09-24T01:54:39 <p>Information published.</p> firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() Mariner Linux Yes CVE-2026-68444 21474-17084 21474-17084 Moderate 21474-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:46:54 <p>Information published.</p> drm/vc4: Prevent shader BO mappings from becoming writable Mariner Linux Yes CVE-2026-68445 21474-17084 21474-17084 21474-17084 Moderate 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21474-17084 CBL-Mariner Releases 21474-17084 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:47:48 <p>Information published.</p> 1.0 2026-08-14T18:47:48 <p>Information published.</p> drm/vmwgfx: Validate vmw_surface_metadata::array_size Mariner Linux Yes CVE-2026-68446 21474-17084 21474-17084 Low 21474-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:55:08 <p>Information published.</p> drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size Mariner Linux Yes CVE-2026-68447 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T01:57:10 <p>Information published.</p> 1.0 2026-08-14T18:41:23 <p>Information published.</p> 2.0 2026-09-23T02:37:08 <p>Information published.</p> 4.0 2026-09-24T02:18:11 <p>Information published.</p> ovl: check access to copy_file_range source with src mounter creds Mariner Linux Yes CVE-2026-68448 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:36:22 <p>Information published.</p> 1.0 2026-08-14T18:39:56 <p>Information published.</p> 3.0 2026-09-24T01:56:25 <p>Information published.</p> 4.0 2026-09-24T02:17:39 <p>Information published.</p> btrfs: free mapping node on duplicate reloc root insert Mariner Linux Yes CVE-2026-68450 21474-17084 21474-17084 Low 21474-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T18:48:46 <p>Information published.</p> s390/zcrypt: Validate length for CCA AES cipher key requests Mariner Linux Yes CVE-2026-68452 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-14T19:14:17 <p>Information published.</p> 1.0 2026-08-14T19:14:17 <p>Information published.</p> 2.0 2026-08-23T14:59:34 <p>Information published.</p> wifi: mac80211: validate extension-frame layout before RX Mariner Linux Yes CVE-2026-68470 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Important 21932-17084 Important 21684-17084 Important 21892-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21684-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 3.0 2026-09-23T02:55:21 <p>Information published.</p> 5.0 2026-09-24T02:15:06 <p>Information published.</p> 1.0 2026-08-23T14:42:43 <p>Information published.</p> 2.0 2026-09-20T01:52:38 <p>Information published.</p> 4.0 2026-09-24T01:12:44 <p>Information published.</p> wifi: ieee80211: validate MLE common info length Mariner Linux Yes CVE-2026-68471 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Important 21684-17084 Important 21892-17084 Important 21932-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21684-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21892-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:58:36 <p>Information published.</p> 2.0 2026-09-23T02:01:16 <p>Information published.</p> 3.0 2026-09-24T01:33:59 <p>Information published.</p> 4.0 2026-09-24T02:29:47 <p>Information published.</p> x86/bugs: Make Safe-RET robust against interrupt injection Mariner Linux Yes CVE-2026-68480 21626-17084 21684-17084 21626-17084 21684-17084 Important 21626-17084 Important 21684-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21626-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21684-17084 1.0 2026-08-08T01:01:45 <p>Information published.</p> 2.0 2026-08-10T14:41:29 <p>Information published.</p> python-cryptography: Duplicate self-signed intermediates can cause exponential path-building Mariner GitHub_M Yes CVE-2026-69249 Uncontrolled Resource Consumption 21165-17084 21165-17084 Important 21165-17084 CBL-Mariner Releases 21165-17084 No Security Update 42.0.5-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21165-17084 CBL-Mariner Releases 2.0 2026-08-23T14:43:26 <p>Information published.</p> 1.0 2026-08-07T01:20:10 <p>Information published.</p> Stunnel: ssrf bypass in stunnel socks proxy via ipv4-mapped ipv6 loopback and unspecified addresses allows access to loopback-only services Mariner redhat Yes CVE-2026-70367 Server-Side Request Forgery (SSRF) 21673-17084 21673-17084 Moderate 21673-17084 5.4 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 21673-17084 Release Notes 21673-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21673-17084 Release Notes 1.0 2026-08-07T01:19:20 <p>Information published.</p> 2.0 2026-09-25T02:35:29 <p>Information published.</p> Stunnel: stack-based out-of-bounds read/write in stunnel s_vlog via oversized log message Mariner redhat Yes CVE-2026-70368 Out-of-bounds Read 21673-17084 21673-17084 Moderate 21673-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 21673-17084 Release Notes 21673-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21673-17084 Release Notes 1.0 2026-08-07T01:18:50 <p>Information published.</p> 2.0 2026-09-25T02:35:02 <p>Information published.</p> rsync 3.1.0 < 3.5.0 Access Control Bypass via DNS Resolution Failure Mariner VulnCheck Yes CVE-2026-70452 Incorrect Authorization 21597-17084 21597-17084 Critical 21597-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:44:00 <p>Information published.</p> rsync < 3.5.0 Algorithmic Complexity DoS via hash_search() Mariner VulnCheck Yes CVE-2026-70453 Inefficient Algorithmic Complexity 21597-17084 21597-17084 Important 21597-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21597-17084 1.0 2026-08-23T14:49:38 <p>Information published.</p> rsync < 3.5.0 TLS Certificate Validation Bypass via SSL/OpenSSL Mode Mariner VulnCheck Yes CVE-2026-70454 Improper Certificate Validation 21597-17084 21597-17084 Important 21597-17084 8.0 8.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N 21597-17084 1.0 2026-08-23T14:42:19 <p>Information published.</p> rsync 3.4.2 < 3.5.0 DoS via --zt Zstandard Compression Thread Exhaustion Mariner VulnCheck Yes CVE-2026-70455 Allocation of Resources Without Limits or Throttling 21597-17084 21597-17084 Important 21597-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:45:06 <p>Information published.</p> rsync 3.0.1 < 3.5.0 Heap Out-of-Bounds Write via read_args() Mariner VulnCheck Yes CVE-2026-70456 Out-of-bounds Write 21597-17084 21597-17084 Important 21597-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:48:30 <p>Information published.</p> rsync 3.2.3 < 3.5.0 Out-of-Bounds Write via parse_size_arg() Mariner VulnCheck Yes CVE-2026-70457 Incorrect Calculation of Buffer Size 21597-17084 21597-17084 Moderate 21597-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:48:52 <p>Information published.</p> rsync 3.0.0 < 3.5.0 Out-of-Bounds Write via FLAG_HLINKED Handling Mariner VulnCheck Yes CVE-2026-70458 Out-of-bounds Write 21597-17084 21597-17084 Important 21597-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T15:03:54 <p>Information published.</p> rsync 3.0.0 < 3.5.0 Daemon Crash via Malformed File List Entry Mariner VulnCheck Yes CVE-2026-70459 Use of Uninitialized Resource 21597-17084 21597-17084 Moderate 21597-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:47:22 <p>Information published.</p> rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink Mariner VulnCheck Yes CVE-2026-70460 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21597-17084 21597-17084 Critical 21597-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:47:01 <p>Information published.</p> rsync 3.2.5 < 3.5.0 Heap Out-of-Bounds Write via files-from Entry Mariner VulnCheck Yes CVE-2026-70461 Out-of-bounds Write 21597-17084 21597-17084 Important 21597-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T15:04:10 <p>Information published.</p> rsync 3.1.0 < 3.5.0 Signed Integer Overflow via MSG_IO_TIMEOUT Mariner VulnCheck Yes CVE-2026-70462 Integer Overflow or Wraparound 21597-17084 21597-17084 Moderate 21597-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:48:11 <p>Information published.</p> rsync 2.0.0 < 3.5.0 Connection Slot Exhaustion DoS via Handshake Stall Mariner VulnCheck Yes CVE-2026-70464 Allocation of Resources Without Limits or Throttling 21597-17084 21597-17084 Important 21597-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21597-17084 CBL-Mariner Releases 21597-17084 No Security Update 3.5.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21597-17084 CBL-Mariner Releases 1.0 2026-08-23T14:43:45 <p>Information published.</p> tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all() Mariner VulnCheck Yes CVE-2026-70622 Improper Link Resolution Before File Access ('Link Following') 21655-17084 21719-17084 21915-17084 21699-17084 21674-17084 21588-17084 21500-17084 21716-17084 21720-17084 21850-17084 21813-17084 21842-17084 21788-17084 21916-17084 21655-17084 21719-17084 21915-17084 21699-17084 21674-17084 21588-17084 21500-17084 21716-17084 21720-17084 21850-17084 21813-17084 21842-17084 21788-17084 21916-17084 Moderate 21655-17084 Moderate 21719-17084 Moderate 21915-17084 Moderate 21699-17084 Moderate 21674-17084 Moderate 21588-17084 Moderate 21500-17084 Moderate 21716-17084 Moderate 21720-17084 Moderate 21850-17084 Moderate 21813-17084 Moderate 21842-17084 Moderate 21788-17084 Moderate 21916-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21655-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21719-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21915-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21699-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21674-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21588-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21500-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21716-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21720-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21850-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21813-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21842-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21788-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21916-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21655-17084 21674-17084 21500-17084 21716-17084 21813-17084 21842-17084 Security Update 21655-17084 21674-17084 21500-17084 21716-17084 21813-17084 21842-17084 Release Notes 21915-17084 21588-17084 21850-17084 21788-17084 21916-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21915-17084 21588-17084 21850-17084 21788-17084 21916-17084 Release Notes 1.0 2026-08-14T19:00:50 <p>Information published.</p> 2.0 2026-09-07T01:46:51 <p>Information published.</p> 4.0 2026-09-09T14:58:45 <p>Information published.</p> 5.0 2026-09-15T01:47:31 <p>Information published.</p> 7.0 2026-09-24T02:20:24 <p>Information published.</p> 8.0 2026-09-25T02:18:19 <p>Information published.</p> 1.0 2026-08-14T19:00:47 <p>Information published.</p> 3.0 2026-09-08T14:44:57 <p>Information published.</p> 6.0 2026-09-23T02:38:58 <p>Information published.</p> Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion Mariner redhat Yes CVE-2026-71217 Improper Input Validation 21721-17084 21721-17084 Important 21721-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21721-17084 CBL-Mariner Releases 21721-17084 No Security Update 3.17.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21721-17084 CBL-Mariner Releases 2.0 2026-08-23T14:56:27 <p>Information published.</p> 1.0 2026-08-14T19:02:23 <p>Information published.</p> 1.0 2026-08-14T19:02:24 <p>Information published.</p> Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows unauthenticated remote memory exhaustion Mariner redhat Yes CVE-2026-71218 Memory Allocation with Excessive Size Value 21721-17084 21721-17084 Moderate 21721-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U 21721-17084 CBL-Mariner Releases 21721-17084 No Security Update 3.17.1-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21721-17084 CBL-Mariner Releases 1.0 2026-08-14T19:01:42 <p>Information published.</p> 2.0 2026-08-23T14:56:07 <p>Information published.</p> Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes cipher state reset across chunk boundaries Mariner redhat Yes CVE-2026-71225 Use of Insufficiently Random Values 21685-17084 21685-17084 Moderate 21685-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N 21685-17084 CBL-Mariner Releases 21685-17084 No Security Update 1.5.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21685-17084 CBL-Mariner Releases 1.0 2026-08-09T01:03:14 <p>Information published.</p> 2.0 2026-08-10T14:43:52 <p>Information published.</p> 3.0 2026-08-23T14:45:21 <p>Information published.</p> Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi's one-shot aio path Mariner redhat Yes CVE-2026-71226 Use After Free 21685-17084 21685-17084 Important 21685-17084 7.3 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H 21685-17084 CBL-Mariner Releases 21685-17084 No Security Update 1.5.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21685-17084 CBL-Mariner Releases 3.0 2026-08-23T14:45:39 <p>Information published.</p> 1.0 2026-08-09T01:03:20 <p>Information published.</p> 2.0 2026-08-10T14:44:02 <p>Information published.</p> Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() due to unhandled io_getevents() timeout return Mariner redhat Yes CVE-2026-71227 Loop with Unreachable Exit Condition ('Infinite Loop') 21685-17084 21685-17084 Moderate 21685-17084 5.1 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21685-17084 CBL-Mariner Releases 21685-17084 No Security Update 1.5.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21685-17084 CBL-Mariner Releases 1.0 2026-08-09T01:03:26 <p>Information published.</p> 2.0 2026-08-10T14:44:13 <p>Information published.</p> 3.0 2026-08-23T14:45:59 <p>Information published.</p> jsoup: Cleaner may expose markup with custom raw-text elements Mariner GitHub_M Yes CVE-2026-71497 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21194-17084 21194-17084 Moderate 21194-17084 4.7 4.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N 21194-17084 Release Notes 21194-17084 Security Update 1.14.0-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21194-17084 Release Notes 4.0 2026-10-18T01:47:22 <p>Information published.</p> 1.0 2026-08-11T01:03:16 <p>Information published.</p> 2.0 2026-09-25T02:13:22 <p>Information published.</p> 3.0 2026-10-17T14:50:08 <p>Information published.</p> go-git: Worktree operations may follow symlinks Mariner GitHub_M Yes CVE-2026-71556 Improper Link Resolution Before File Access ('Link Following') 21666-17084 21666-17084 Important 21666-17084 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L 21666-17084 CBL-Mariner Releases 21666-17084 No Security Update 1.9.5-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21666-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:00 <p>Information published.</p> 2.0 2026-08-23T14:52:15 <p>Information published.</p> go-git: Malicious reference names may modify files outside the reference storage Mariner GitHub_M Yes CVE-2026-71557 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21666-17084 21666-17084 Moderate 21666-17084 6.3 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:L 21666-17084 CBL-Mariner Releases 21666-17084 No Security Update 1.9.5-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21666-17084 CBL-Mariner Releases 1.0 2026-08-11T01:04:14 <p>Information published.</p> 2.0 2026-08-23T14:52:35 <p>Information published.</p> ipmi: Fix user refcount underflow in event delivery Mariner Linux Yes CVE-2026-72042 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-23T14:56:40 <p>Information published.</p> 3.0 2026-09-24T01:28:43 <p>Information published.</p> 2.0 2026-09-23T01:56:14 <p>Information published.</p> 4.0 2026-09-24T02:26:44 <p>Information published.</p> 5.0 2026-10-24T14:44:30 <p>Information published.</p> mmc: vub300: fix use-after-free on probe failure Mariner Linux Yes CVE-2026-72073 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21892-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:10:09 <p>Information published.</p> 2.0 2026-09-24T01:43:31 <p>Information published.</p> 3.0 2026-09-24T02:34:36 <p>Information published.</p> dm-verity: fix buffer overflow in FEC calculation Mariner Linux Yes CVE-2026-72098 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21892-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:56:27 <p>Information published.</p> 3.0 2026-09-23T14:13:18 <p>Information published.</p> 2.0 2026-09-10T03:33:17 <p>Information published.</p> 4.0 2026-09-24T01:27:48 <p>Information published.</p> 5.0 2026-09-24T02:26:24 <p>Information published.</p> ntfs: reject non-resident records for resident-only attributes Mariner Linux Yes CVE-2026-72198 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T15:04:47 <p>Information published.</p> 2.0 2026-09-23T02:54:28 <p>Information published.</p> 3.0 2026-09-24T01:11:27 <p>Information published.</p> 4.0 2026-09-24T02:13:52 <p>Information published.</p> ntfs: detect mapping-pairs LCN accumulator overflow Mariner Linux Yes CVE-2026-72200 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T15:03:01 <p>Information published.</p> 2.0 2026-09-23T02:10:39 <p>Information published.</p> 3.0 2026-09-24T01:44:03 <p>Information published.</p> 4.0 2026-09-24T02:34:58 <p>Information published.</p> ntfs: skip extent mft records in writeback to prevent deadlock Mariner Linux Yes CVE-2026-72203 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T01:13:45 <p>Information published.</p> 1.0 2026-08-23T14:42:59 <p>Information published.</p> 2.0 2026-09-23T02:56:04 <p>Information published.</p> 4.0 2026-09-24T02:16:04 <p>Information published.</p> smb: client: fix busy dentry warning on unmount after DIO Mariner Linux Yes CVE-2026-72315 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Low 21892-17084 Low 21684-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-23T15:00:32 <p>Information published.</p> 2.0 2026-09-23T02:45:02 <p>Information published.</p> 3.0 2026-09-24T02:03:26 <p>Information published.</p> 4.0 2026-09-24T02:25:09 <p>Information published.</p> 5.0 2026-10-24T14:44:26 <p>Information published.</p> netfilter: nft_lookup: fix catchall element handling with inverted lookups Mariner Linux Yes CVE-2026-72320 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Important 21892-17084 Important 21684-17084 Important 21932-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21892-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21684-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 4.0 2026-09-24T02:38:21 <p>Information published.</p> 1.0 2026-08-23T14:44:37 <p>Information published.</p> 2.0 2026-09-23T02:16:45 <p>Information published.</p> 3.0 2026-09-24T01:55:56 <p>Information published.</p> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Mariner Linux Yes CVE-2026-72321 21932-17084 21892-17084 21932-17084 21892-17084 Low 21932-17084 Low 21892-17084 3.1 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 3.1 3.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 3.0 2026-09-24T02:10:23 <p>Information published.</p> 1.0 2026-09-23T02:51:16 <p>Information published.</p> 2.0 2026-09-24T01:08:57 <p>Information published.</p> gpio: mvebu: free generic chips on unbind Mariner Linux Yes CVE-2026-72324 21932-17084 21892-17084 21932-17084 21892-17084 Low 21932-17084 Low 21892-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-09-23T02:53:40 <p>Information published.</p> 2.0 2026-09-24T01:10:50 <p>Information published.</p> 3.0 2026-09-24T02:12:17 <p>Information published.</p> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Mariner Linux Yes CVE-2026-72325 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:12:08 <p>Information published.</p> 2.0 2026-09-24T01:46:44 <p>Information published.</p> 3.0 2026-09-24T02:36:00 <p>Information published.</p> net/liquidio: drop cached VF pci_dev LUT Mariner Linux Yes CVE-2026-72329 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Important 21892-17084 Important 21932-17084 Important 21684-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.1 7.1 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T15:00:02 <p>Information published.</p> 2.0 2026-09-23T02:03:17 <p>Information published.</p> 3.0 2026-09-24T01:35:19 <p>Information published.</p> 4.0 2026-09-24T02:30:31 <p>Information published.</p> Bluetooth: 6lowpan: avoid untracked enable work Mariner Linux Yes CVE-2026-72337 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:04:14 <p>Information published.</p> 2.0 2026-09-24T01:36:33 <p>Information published.</p> 3.0 2026-09-24T02:31:17 <p>Information published.</p> net/mlx5e: Fix publication race for priv->channel_stats[] Mariner Linux Yes CVE-2026-72341 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-24T01:15:26 <p>Information published.</p> 1.0 2026-09-23T02:56:45 <p>Information published.</p> 3.0 2026-09-24T02:17:57 <p>Information published.</p> xen/pvcalls: bound backend response req_id before indexing rsp[] Mariner Linux Yes CVE-2026-72380 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-23T01:13:24 <p>Information published.</p> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Mariner Linux Yes CVE-2026-72383 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Important 21932-17084 Important 21684-17084 Important 21892-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Security Update 21892-17084 1.0 2026-08-23T14:43:03 <p>Information published.</p> 2.0 2026-09-23T02:13:42 <p>Information published.</p> 3.0 2026-09-24T02:36:47 <p>Information published.</p> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Mariner Linux Yes CVE-2026-72392 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:24:09 <p>Information published.</p> 2.0 2026-09-11T01:55:39 <p>Information published.</p> 3.0 2026-09-25T02:14:16 <p>Information published.</p> 1.0 2026-08-23T15:00:39 <p>Information published.</p> hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() Mariner Linux Yes CVE-2026-72397 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-09-23T01:48:50 <p>Information published.</p> 1.0 2026-08-23T14:52:08 <p>Information published.</p> 3.0 2026-09-24T01:21:53 <p>Information published.</p> 4.0 2026-09-24T02:22:39 <p>Information published.</p> sctp: add INIT verification after cookie unpacking Mariner Linux Yes CVE-2026-72398 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Important 21892-17084 Important 21932-17084 Important 21684-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21892-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:43:16 <p>Information published.</p> 4.0 2026-09-24T02:17:17 <p>Information published.</p> 2.0 2026-09-23T02:56:22 <p>Information published.</p> 3.0 2026-09-24T01:14:30 <p>Information published.</p> bpf: Mask pseudo pointer values in verifier logs Mariner Linux Yes CVE-2026-72402 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Security Update 21892-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 4.0 2026-10-15T01:49:29 <p>Information published.</p> 1.0 2026-09-23T02:15:04 <p>Information published.</p> 2.0 2026-09-24T02:37:35 <p>Information published.</p> 3.0 2026-10-13T17:10:59 <p>Information published.</p> tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Mariner Linux Yes CVE-2026-72404 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-09-23T01:58:08 <p>Information published.</p> 3.0 2026-09-24T01:31:22 <p>Information published.</p> 4.0 2026-09-24T02:27:56 <p>Information published.</p> 1.0 2026-08-23T14:57:40 <p>Information published.</p> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Mariner Linux Yes CVE-2026-72405 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 4.0 2026-09-24T02:20:48 <p>Information published.</p> 1.0 2026-08-23T14:51:02 <p>Information published.</p> 2.0 2026-09-23T01:45:58 <p>Information published.</p> 3.0 2026-09-24T01:19:58 <p>Information published.</p> sctp: fix err_chunk memory leaks in INIT handling Mariner Linux Yes CVE-2026-72413 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-09-23T02:51:56 <p>Information published.</p> 2.0 2026-09-24T01:09:33 <p>Information published.</p> 3.0 2026-09-24T02:11:13 <p>Information published.</p> 4.0 2026-10-13T17:02:51 <p>Information published.</p> 5.0 2026-10-15T02:42:28 <p>Information published.</p> md/raid5: avoid R5_Overlap races while breaking stripe batches Mariner Linux Yes CVE-2026-72420 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T02:02:31 <p>Information published.</p> 4.0 2026-09-24T02:24:20 <p>Information published.</p> 1.0 2026-08-23T15:00:13 <p>Information published.</p> 2.0 2026-09-23T02:43:58 <p>Information published.</p> bpf: Guard conntrack opts error writes Mariner Linux Yes CVE-2026-72423 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21892-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T15:01:18 <p>Information published.</p> 2.0 2026-09-23T02:46:46 <p>Information published.</p> 3.0 2026-09-24T01:05:03 <p>Information published.</p> 4.0 2026-09-24T02:06:11 <p>Information published.</p> netfilter: ipset: make sure gc is properly stopped Mariner Linux Yes CVE-2026-72434 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-23T14:55:25 <p>Information published.</p> 3.0 2026-09-24T01:25:46 <p>Information published.</p> 4.0 2026-09-24T02:25:39 <p>Information published.</p> 2.0 2026-09-23T01:52:26 <p>Information published.</p> md/raid10: fix writes_pending and barrier reference leaks on discard failures Mariner Linux Yes CVE-2026-72438 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Low 21932-17084 Low 21684-17084 Low 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-23T15:01:33 <p>Information published.</p> 4.0 2026-09-24T02:07:14 <p>Information published.</p> 2.0 2026-09-23T02:48:05 <p>Information published.</p> 3.0 2026-09-24T01:06:04 <p>Information published.</p> md/raid10: fix writes_pending leak on write request failures Mariner Linux Yes CVE-2026-72439 21892-17084 21932-17084 21892-17084 21932-17084 Low 21892-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T02:29:20 <p>Information published.</p> 1.0 2026-09-23T01:59:50 <p>Information published.</p> 2.0 2026-09-24T01:33:19 <p>Information published.</p> md/raid1: fix writes_pending and barrier reference leaks on write failures Mariner Linux Yes CVE-2026-72440 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:44:05 <p>Information published.</p> 3.0 2026-09-24T01:54:15 <p>Information published.</p> 2.0 2026-09-23T02:15:50 <p>Information published.</p> 4.0 2026-09-24T02:37:56 <p>Information published.</p> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Mariner Linux Yes CVE-2026-72469 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Important 21684-17084 Important 21932-17084 Important 21892-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21684-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 3.0 2026-09-24T01:45:08 <p>Information published.</p> 1.0 2026-08-23T15:03:25 <p>Information published.</p> 2.0 2026-09-23T02:11:16 <p>Information published.</p> 4.0 2026-09-24T02:35:16 <p>Information published.</p> nfs: use nfsi->rwsem to protect traversal of the file lock list Mariner Linux Yes CVE-2026-72472 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T01:46:51 <p>Information published.</p> 4.0 2026-09-24T02:21:23 <p>Information published.</p> 1.0 2026-08-23T14:51:18 <p>Information published.</p> 3.0 2026-09-24T01:20:43 <p>Information published.</p> net: serialize netif_running() check in enqueue_to_backlog() Mariner Linux Yes CVE-2026-72493 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T15:01:11 <p>Information published.</p> 2.0 2026-09-23T02:45:47 <p>Information published.</p> 4.0 2026-09-24T02:05:02 <p>Information published.</p> 3.0 2026-09-24T01:04:22 <p>Information published.</p> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Mariner Linux Yes CVE-2026-72495 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:49:20 <p>Information published.</p> 4.0 2026-09-24T02:07:53 <p>Information published.</p> 1.0 2026-08-23T15:02:27 <p>Information published.</p> 3.0 2026-09-24T01:06:49 <p>Information published.</p> RDMA/bnxt_re: Proper rollback if the ioremap fails Mariner Linux Yes CVE-2026-72496 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-23T15:03:13 <p>Information published.</p> 3.0 2026-09-24T01:08:17 <p>Information published.</p> 4.0 2026-09-24T02:09:29 <p>Information published.</p> 2.0 2026-09-23T02:50:18 <p>Information published.</p> 5.0 2026-10-13T17:01:06 <p>Information published.</p> 6.0 2026-10-15T02:41:39 <p>Information published.</p> RDMA/bnxt_re: Initialize dpi variable to zero Mariner Linux Yes CVE-2026-72501 21892-17084 21932-17084 21892-17084 21932-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T02:22:31 <p>Information published.</p> 1.0 2026-09-23T02:41:26 <p>Information published.</p> 2.0 2026-09-24T01:58:56 <p>Information published.</p> libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions. Mariner mitre Yes CVE-2026-72522 Out-of-bounds Read 21698-17084 21698-17084 Moderate 21698-17084 6.2 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21698-17084 CBL-Mariner Releases 21698-17084 No Security Update 2.8.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21698-17084 CBL-Mariner Releases 1.0 2026-08-11T01:08:47 <p>Information published.</p> 3.0 2026-08-14T18:04:52 <p>Information published.</p> 2.0 2026-08-14T18:04:01 <p>Information published.</p> 4.0 2026-08-23T14:46:59 <p>Information published.</p> Redis - Heap Out-of-Bounds Read in Cluster Bus PING Message Handler Mariner TuranSec Yes CVE-2026-72568 Out-of-bounds Read 21628-17084 21843-17084 21628-17084 21843-17084 Moderate 21628-17084 Moderate 21843-17084 7.1 6.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:U/RC:U 21628-17084 7.1 6.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H/E:U/RL:U/RC:U 21843-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21843-17084 Security Update 21843-17084 1.0 2026-08-11T01:17:10 <p>Information published.</p> 2.0 2026-09-09T14:56:53 <p>Information published.</p> Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login Mariner redhat Yes CVE-2026-72693 Improper Access Control 21750-17084 21750-17084 Important 21750-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21750-17084 CBL-Mariner Releases 21750-17084 No Security Update 2.2.0-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21750-17084 CBL-Mariner Releases 1.0 2026-08-23T14:56:32 <p>Information published.</p> Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet Mariner VulnCheck Yes CVE-2026-72712 Loop with Unreachable Exit Condition ('Infinite Loop') 21560-17084 21810-17084 21560-17084 21810-17084 Low 21560-17084 Low 21810-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21560-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21810-17084 CBL-Mariner Releases 21560-17084 No Security Update 7.95-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21560-17084 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21810-17084 Security Update 7.95-5 21810-17084 2.0 2026-09-09T14:57:24 <p>Information published.</p> 1.0 2026-08-14T18:43:46 <p>Information published.</p> 3.0 2026-09-13T01:47:10 <p>Information published.</p> go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware Mariner VulnCheck Yes CVE-2026-72816 Authentication Bypass by Spoofing 21668-17084 21656-17084 21899-17084 21816-17084 21668-17084 21656-17084 21899-17084 21816-17084 Moderate 21668-17084 Moderate 21656-17084 Moderate 21899-17084 Moderate 21816-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21668-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21656-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21899-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21816-17084 CBL-Mariner Releases 21668-17084 No Security Update 2.97.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 CBL-Mariner Releases Release Notes 21899-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21899-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21816-17084 Security Update 21816-17084 1.0 2026-08-20T22:02:08 <p>Information published.</p> 4.0 2026-09-23T02:17:02 <p>Information published.</p> 5.0 2026-09-25T02:31:38 <p>Information published.</p> 2.0 2026-08-23T14:48:44 <p>Information published.</p> 3.0 2026-09-09T15:03:59 <p>Information published.</p> go-chi chi 0.9.0 before 5.3.0 IP Spoofing via X-Forwarded-For Mariner VulnCheck Yes CVE-2026-72817 Insufficient Verification of Data Authenticity 21668-17084 21656-17084 21816-17084 21668-17084 21656-17084 21816-17084 Moderate 21668-17084 Moderate 21656-17084 Moderate 21816-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21668-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21656-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21816-17084 CBL-Mariner Releases 21668-17084 No Security Update 2.97.0-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 CBL-Mariner Releases https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21816-17084 Security Update 2.7.5-21 21816-17084 2.0 2026-08-23T14:49:10 <p>Information published.</p> 4.0 2026-09-22T14:49:12 <p>Information published.</p> 1.0 2026-08-20T22:02:19 <p>Information published.</p> 3.0 2026-09-09T15:04:08 <p>Information published.</p> msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation Mariner VulnCheck Yes CVE-2026-72854 Integer Overflow or Wraparound 21260-17084 21756-17084 21665-17084 21898-17084 21260-17084 21756-17084 21665-17084 21898-17084 Moderate 21260-17084 Moderate 21756-17084 Moderate 21665-17084 Moderate 21898-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L 21260-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L 21756-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L 21665-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:L 21898-17084 Release Notes 21756-17084 21665-17084 21898-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21756-17084 21665-17084 21898-17084 Release Notes 2.0 2026-09-07T01:49:23 <p>Information published.</p> 3.0 2026-09-23T02:36:43 <p>Information published.</p> 5.0 2026-09-25T02:29:29 <p>Information published.</p> 1.0 2026-08-25T01:04:54 <p>Information published.</p> 4.0 2026-09-24T02:20:52 <p>Information published.</p> GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default Mariner GitHub_M Yes CVE-2026-72924 Binding to an Unrestricted IP Address 21668-17084 21825-17084 21668-17084 21825-17084 Low 21668-17084 Low 21825-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21668-17084 Security Update 21668-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21825-17084 Security Update 2.101.0-1 21825-17084 1.0 2026-08-29T01:08:17 <p>Information published.</p> 2.0 2026-09-05T01:58:23 <p>Information published.</p> 3.0 2026-09-09T14:47:56 <p>Information published.</p> 4.0 2026-09-18T14:49:50 <p>Information published.</p> 5.0 2026-09-19T01:55:45 <p>Information published.</p> Vim: Stack Buffer Overflow in the Vim Socket Server Mariner GitHub_M Yes CVE-2026-73070 Stack-based Buffer Overflow 21717-17084 21717-17084 Moderate 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 1.0 2026-08-14T18:53:34 <p>Information published.</p> 2.0 2026-08-23T14:55:46 <p>Information published.</p> Vim: Use-after-free in JSON Decoding Mariner GitHub_M Yes CVE-2026-73071 Use After Free 21717-17084 21717-17084 Low 21717-17084 3.3 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:U 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 1.0 2026-08-23T14:57:37 <p>Information published.</p> Vim: Heap Buffer Overflow when Loading a Spell File Mariner GitHub_M Yes CVE-2026-73072 Heap-based Buffer Overflow 21717-17084 21717-17084 Important 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 2.0 2026-08-23T14:54:46 <p>Information published.</p> 1.0 2026-08-14T18:51:08 <p>Information published.</p> Vim: Arbitrary Ex Command Execution in C Omni-Completion Mariner GitHub_M Yes CVE-2026-73073 Improper Control of Generation of Code ('Code Injection') 21717-17084 21718-17084 21717-17084 21718-17084 Important 21717-17084 Important 21718-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21718-17084 Security Update 9.2.0976-1 21718-17084 1.0 2026-08-20T21:59:35 <p>Information published.</p> 2.0 2026-09-10T03:33:51 <p>Information published.</p> Vim: Heap Buffer Overflow in Text Property Handling Mariner GitHub_M Yes CVE-2026-73074 Integer Overflow or Wraparound 21717-17084 21717-17084 Important 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 1.0 2026-08-14T18:50:18 <p>Information published.</p> 2.0 2026-08-23T14:54:25 <p>Information published.</p> Vim: Out-of-bounds Access in Popup Opacity Handling Mariner GitHub_M Yes CVE-2026-73075 Buffer Underwrite ('Buffer Underflow') 21717-17084 21717-17084 Moderate 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 1.0 2026-08-23T14:57:25 <p>Information published.</p> Vim: Arbitrary Command Execution via Malicious `.VimballRecord` Entry Replay in `vimball.vim` Mariner GitHub_M Yes CVE-2026-73076 Improper Control of Generation of Code ('Code Injection') 21717-17084 21717-17084 Important 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 1.0 2026-08-14T18:52:44 <p>Information published.</p> 2.0 2026-08-23T14:55:26 <p>Information published.</p> Vim: Arbitrary Code Execution via Shell Keyword Lookup Mariner GitHub_M Yes CVE-2026-73077 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 21717-17084 21717-17084 Important 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 2.0 2026-08-23T14:55:06 <p>Information published.</p> 1.0 2026-08-14T18:51:57 <p>Information published.</p> Vim: Arbitrary Code Execution via Netrw Menu Construction Mariner GitHub_M Yes CVE-2026-73078 Improper Neutralization of Special Elements used in a Command ('Command Injection') 21717-17084 21717-17084 Important 21717-17084 CBL-Mariner Releases 21717-17084 No Security Update 9.2.0957-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21717-17084 CBL-Mariner Releases 1.0 2026-08-14T18:49:35 <p>Information published.</p> 2.0 2026-08-23T14:54:05 <p>Information published.</p> DBI versions before 1.652 for Perl allow a heap out-of-bounds write via an unvalidated numeric placeholder that sets the binder counter in preparse Mariner CPANSec Yes CVE-2026-73194 Improper Validation of Specified Quantity in Input 21737-17084 21737-17084 Important 21737-17084 9.1 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U 21737-17084 1.0 2026-08-20T22:03:16 <p>Information published.</p> In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension. Mariner mitre Yes CVE-2026-73281 Incorrect Resource Transfer Between Spheres 21710-17084 21837-17084 21710-17084 21837-17084 Low 21710-17084 Low 21837-17084 3.5 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N 21710-17084 3.5 3.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N 21837-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Security Update 9.8p1-10 21837-17084 3.0 2026-09-13T01:47:27 <p>Information published.</p> 1.0 2026-08-14T18:45:20 <p>Information published.</p> 2.0 2026-09-09T14:57:44 <p>Information published.</p> In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent. Mariner mitre Yes CVE-2026-73282 Use After Free 21710-17084 21837-17084 21710-17084 21837-17084 Moderate 21710-17084 Moderate 21837-17084 4.8 4.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U 21710-17084 4.8 4.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U 21837-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Security Update 9.8p1-10 21837-17084 1.0 2026-08-14T18:46:07 <p>Information published.</p> 2.0 2026-09-09T14:58:00 <p>Information published.</p> 3.0 2026-09-13T01:47:35 <p>Information published.</p> In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not. Mariner mitre Yes CVE-2026-73283 Always-Incorrect Control Flow Implementation 21710-17084 21837-17084 21710-17084 21837-17084 Low 21710-17084 Low 21837-17084 2.5 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U 21710-17084 2.5 2.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N/E:U 21837-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21837-17084 Security Update 9.8p1-10 21837-17084 1.0 2026-08-23T14:53:28 <p>Information published.</p> 2.0 2026-09-09T14:57:35 <p>Information published.</p> 3.0 2026-09-13T01:47:20 <p>Information published.</p> etcd: Watch API authorization bypass via open-ended range requests Mariner GitHub_M Yes CVE-2026-73499 Incorrect Authorization 21745-17084 21652-17084 21745-17084 21652-17084 Moderate 21745-17084 Moderate 21652-17084 1.0 2026-08-23T14:55:36 <p>Information published.</p> etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline Mariner GitHub_M Yes CVE-2026-73500 Allocation of Resources Without Limits or Throttling 21745-17084 21741-17084 21746-17084 21652-17084 21688-17084 21744-17084 21747-17084 21745-17084 21741-17084 21746-17084 21652-17084 21688-17084 21744-17084 21747-17084 Important 21745-17084 Important 21741-17084 Important 21746-17084 Important 21652-17084 Important 21688-17084 Important 21744-17084 Important 21747-17084 CBL-Mariner Releases 21745-17084 No Security Update 0.24.2-30 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21745-17084 CBL-Mariner Releases CBL-Mariner Releases 21741-17084 No Security Update 2.14.1-17 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21741-17084 CBL-Mariner Releases CBL-Mariner Releases 21746-17084 No Security Update 0.0.10-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21746-17084 CBL-Mariner Releases CBL-Mariner Releases 21652-17084 No Security Update 1.30.10-28 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21652-17084 CBL-Mariner Releases CBL-Mariner Releases 21688-17084 No Security Update 1.12.15-12 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21688-17084 CBL-Mariner Releases CBL-Mariner Releases 21744-17084 No Security Update 0.5.1-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21744-17084 CBL-Mariner Releases CBL-Mariner Releases 21747-17084 No Security Update 0.12.0-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21747-17084 CBL-Mariner Releases 1.0 2026-08-23T14:54:21 <p>Information published.</p> node-tar: Uncontrolled recursion in mapHas/filesFilter allows uncatchable stack-overflow DoS via crafted long-path tar with member selection Mariner GitHub_M Yes CVE-2026-73566 Uncontrolled Resource Consumption 20131-17084 20131-17084 Important 20131-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20131-17084 1.0 2026-08-21T14:02:15 <p>Information published.</p> sockmap: Fix use-after-free in udp_bpf_recvmsg() Mariner Linux Yes CVE-2026-74257 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Important 21892-17084 Important 21684-17084 Important 21932-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:14:36 <p>Information published.</p> 4.0 2026-09-24T02:37:07 <p>Information published.</p> 1.0 2026-08-23T14:43:19 <p>Information published.</p> 3.0 2026-09-24T01:50:32 <p>Information published.</p> bpf: Guard __get_user acesss with access_ok for uprobe_multi data Mariner Linux Yes CVE-2026-74258 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 6.0 2026-10-15T01:48:26 <p>Information published.</p> 2.0 2026-09-23T02:11:40 <p>Information published.</p> 3.0 2026-09-24T01:45:51 <p>Information published.</p> 4.0 2026-09-24T02:35:40 <p>Information published.</p> 1.0 2026-08-23T15:03:50 <p>Information published.</p> 5.0 2026-10-13T17:09:08 <p>Information published.</p> net: watchdog: fix refcount tracking races Mariner Linux Yes CVE-2026-74264 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:59:54 <p>Information published.</p> 2.0 2026-09-23T02:43:26 <p>Information published.</p> 4.0 2026-09-24T02:23:38 <p>Information published.</p> 3.0 2026-09-24T02:01:42 <p>Information published.</p> tcp: clear sock_ops cb flags before force-closing a child socket Mariner Linux Yes CVE-2026-74268 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-23T15:01:25 <p>Information published.</p> 4.0 2026-09-23T15:48:16 <p>Information published.</p> 5.0 2026-09-24T01:05:47 <p>Information published.</p> 2.0 2026-09-16T01:46:30 <p>Information published.</p> 3.0 2026-09-23T02:47:41 <p>Information published.</p> 6.0 2026-10-02T03:49:21 <p>Information published.</p> bnxt: fix head underflow on XDP head-grow Mariner Linux Yes CVE-2026-74269 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:58:48 <p>Information published.</p> 4.0 2026-09-24T02:21:45 <p>Information published.</p> 2.0 2026-09-23T02:40:45 <p>Information published.</p> 3.0 2026-09-24T01:57:52 <p>Information published.</p> cxl/region: Block region delete during region creation Mariner Linux Yes CVE-2026-74273 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-23T01:13:30 <p>Information published.</p> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Mariner Linux Yes CVE-2026-74289 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-23T14:55:40 <p>Information published.</p> 2.0 2026-09-23T01:53:42 <p>Information published.</p> 3.0 2026-09-24T01:27:00 <p>Information published.</p> 4.0 2026-09-24T02:26:00 <p>Information published.</p> 5.0 2026-10-13T17:05:40 <p>Information published.</p> 6.0 2026-10-15T02:44:06 <p>Information published.</p> ASoC: topology: Check PCM and DAI name strings before use Mariner Linux Yes CVE-2026-74291 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H 21892-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 5.0 2026-10-15T01:46:38 <p>Information published.</p> 3.0 2026-09-24T02:27:33 <p>Information published.</p> 1.0 2026-09-23T01:57:45 <p>Information published.</p> 2.0 2026-09-24T01:30:40 <p>Information published.</p> 4.0 2026-10-13T17:07:23 <p>Information published.</p> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Mariner Linux Yes CVE-2026-74302 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21684-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21892-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-08-23T15:01:16 <p>Information published.</p> 2.0 2026-09-23T02:07:41 <p>Information published.</p> 3.0 2026-09-24T01:39:54 <p>Information published.</p> 4.0 2026-09-24T02:32:53 <p>Information published.</p> 5.0 2026-10-24T14:44:34 <p>Information published.</p> ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Mariner Linux Yes CVE-2026-74307 21932-17084 21892-17084 21932-17084 21892-17084 Moderate 21932-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-09-23T02:04:53 <p>Information published.</p> 3.0 2026-09-24T02:31:41 <p>Information published.</p> 2.0 2026-09-24T01:37:47 <p>Information published.</p> bpf: Cancel special fields on map value recycle Mariner Linux Yes CVE-2026-74314 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-23T15:00:20 <p>Information published.</p> 2.0 2026-09-23T02:03:54 <p>Information published.</p> 3.0 2026-09-24T01:35:51 <p>Information published.</p> 4.0 2026-09-24T02:30:55 <p>Information published.</p> ixgbe: do not configure xps for XDP queues Mariner Linux Yes CVE-2026-74317 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Low 21684-17084 Low 21932-17084 Low 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-23T14:53:00 <p>Information published.</p> 4.0 2026-09-24T02:24:05 <p>Information published.</p> 2.0 2026-09-23T01:50:19 <p>Information published.</p> 3.0 2026-09-24T01:23:37 <p>Information published.</p> btrfs: fix deadlock cloning inline extent when using flushoncommit Mariner Linux Yes CVE-2026-74318 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:05:49 <p>Information published.</p> 3.0 2026-09-24T02:32:05 <p>Information published.</p> 2.0 2026-09-24T01:38:29 <p>Information published.</p> RDMA/nldev: Fix locking when accessing mr->pd Mariner Linux Yes CVE-2026-74334 21684-17084 21892-17084 21684-17084 21892-17084 Important 21684-17084 Important 21892-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:31:41 <p>Information published.</p> 2.0 2026-09-16T01:46:43 <p>Information published.</p> 4.0 2026-09-23T15:06:17 <p>Information published.</p> 1.0 2026-08-23T15:01:32 <p>Information published.</p> 3.0 2026-09-23T02:08:59 <p>Information published.</p> 5.0 2026-09-24T01:41:29 <p>Information published.</p> bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Mariner Linux Yes CVE-2026-74337 21932-17084 21932-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 1.0 2026-10-23T01:13:35 <p>Information published.</p> bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Mariner Linux Yes CVE-2026-74338 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:59:23 <p>Information published.</p> 4.0 2026-09-24T02:23:05 <p>Information published.</p> 2.0 2026-09-23T02:42:16 <p>Information published.</p> 3.0 2026-09-24T02:00:02 <p>Information published.</p> kernfs: link kn to its parent before the LSM init hook Mariner Linux Yes CVE-2026-74342 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:09:17 <p>Information published.</p> 3.0 2026-09-24T02:33:39 <p>Information published.</p> 2.0 2026-09-24T01:42:08 <p>Information published.</p> bpf: Clear rb node linkage when freeing bpf_rb_root Mariner Linux Yes CVE-2026-74344 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-23T14:51:51 <p>Information published.</p> 2.0 2026-09-23T01:47:43 <p>Information published.</p> 3.0 2026-09-24T01:21:18 <p>Information published.</p> 4.0 2026-09-24T02:21:58 <p>Information published.</p> RDMA/siw: Fix endpoint/socket association handling Mariner Linux Yes CVE-2026-74345 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Critical 21932-17084 Critical 21684-17084 Critical 21892-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21932-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21684-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-23T14:47:20 <p>Information published.</p> 4.0 2026-09-24T02:19:21 <p>Information published.</p> 2.0 2026-09-23T01:44:10 <p>Information published.</p> 3.0 2026-09-24T01:16:58 <p>Information published.</p> netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Mariner Linux Yes CVE-2026-74347 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:42:47 <p>Information published.</p> 4.0 2026-09-24T02:36:22 <p>Information published.</p> 2.0 2026-09-23T02:13:20 <p>Information published.</p> 3.0 2026-09-24T01:47:29 <p>Information published.</p> vhost: fix vhost_get_avail_idx for a non empty ring Mariner Linux Yes CVE-2026-74356 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 21932-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 21684-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 3.0 2026-09-24T01:32:11 <p>Information published.</p> 4.0 2026-09-24T02:28:19 <p>Information published.</p> 1.0 2026-08-23T14:57:50 <p>Information published.</p> 2.0 2026-09-23T01:58:36 <p>Information published.</p> md/raid1,raid10: fix bio accounting for split md cloned bios Mariner Linux Yes CVE-2026-74373 21892-17084 21932-17084 21892-17084 21932-17084 Low 21892-17084 Low 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T01:51:29 <p>Information published.</p> 3.0 2026-09-24T02:25:13 <p>Information published.</p> 2.0 2026-09-24T01:24:50 <p>Information published.</p> md/raid1,raid10: fix error-path detection with md_cloned_bio() Mariner Linux Yes CVE-2026-74374 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T01:07:41 <p>Information published.</p> 4.0 2026-09-24T02:08:35 <p>Information published.</p> 1.0 2026-08-23T15:02:35 <p>Information published.</p> 2.0 2026-09-23T02:49:47 <p>Information published.</p> md/raid1,raid10: fix deadlock in read error recovery path Mariner Linux Yes CVE-2026-74375 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:01:55 <p>Information published.</p> 2.0 2026-09-24T01:34:35 <p>Information published.</p> 3.0 2026-09-24T02:30:11 <p>Information published.</p> nvmet-tcp: fix page fragment cache leak in error path Mariner Linux Yes CVE-2026-74386 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T02:07:21 <p>Information published.</p> 3.0 2026-09-24T02:32:29 <p>Information published.</p> 2.0 2026-09-24T01:39:12 <p>Information published.</p> OPP: Fix race between OPP addition and lookup Mariner Linux Yes CVE-2026-74405 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T15:00:51 <p>Information published.</p> 4.0 2026-09-24T02:04:15 <p>Information published.</p> 2.0 2026-09-23T02:45:25 <p>Information published.</p> 3.0 2026-09-24T01:03:17 <p>Information published.</p> drm/vmwgfx: bound DMA command body size against suffix pointer Mariner Linux Yes CVE-2026-74443 21684-17084 21684-17084 Important 21684-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:08:46 <p>Information published.</p> 1.0 2026-08-23T14:54:55 <p>Information published.</p> 2.0 2026-09-11T01:54:36 <p>Information published.</p> 3.0 2026-09-25T02:01:10 <p>Information published.</p> drm/vmwgfx: validate DRAW_PRIMITIVES header size before division Mariner Linux Yes CVE-2026-74444 21684-17084 21684-17084 Important 21684-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:47:56 <p>Information published.</p> 2.0 2026-09-11T01:52:59 <p>Information published.</p> 3.0 2026-09-25T01:49:59 <p>Information published.</p> 1.0 2026-08-23T14:47:36 <p>Information published.</p> drm/vmwgfx: reject DX_BIND_QUERY without a DX context Mariner Linux Yes CVE-2026-74445 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-10-02T02:01:19 <p>Information published.</p> 1.0 2026-09-11T01:53:56 <p>Information published.</p> 2.0 2026-09-25T01:56:28 <p>Information published.</p> drm/amdkfd: hold event_mutex while checkpointing CRIU events Mariner Linux Yes CVE-2026-74446 21684-17084 21684-17084 Important 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-09-25T02:34:39 <p>Information published.</p> 1.0 2026-08-23T15:03:28 <p>Information published.</p> 2.0 2026-09-11T01:50:45 <p>Information published.</p> 4.0 2026-10-02T03:58:57 <p>Information published.</p> drm/amdkfd: fix QID bit leak in pqm_create_queue() Mariner Linux Yes CVE-2026-74448 21684-17084 21684-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-10-02T02:25:34 <p>Information published.</p> 1.0 2026-09-11T01:55:48 <p>Information published.</p> 2.0 2026-09-25T02:14:55 <p>Information published.</p> drm/amd/pm: fix pptable use-after-free Mariner Linux Yes CVE-2026-74450 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T01:54:03 <p>Information published.</p> 3.0 2026-09-23T15:53:00 <p>Information published.</p> 1.0 2026-08-23T14:48:55 <p>Information published.</p> 2.0 2026-09-23T01:44:48 <p>Information published.</p> 4.0 2026-09-24T01:18:27 <p>Information published.</p> drm/vc4: Zero the tile state data array before each BIN job Mariner Linux Yes CVE-2026-74453 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:48:30 <p>Information published.</p> 3.0 2026-09-25T02:22:16 <p>Information published.</p> 1.0 2026-08-23T14:57:49 <p>Information published.</p> 4.0 2026-10-02T03:37:30 <p>Information published.</p> drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size Mariner Linux Yes CVE-2026-74454 21684-17084 21684-17084 Important 21684-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:42:27 <p>Information published.</p> 2.0 2026-09-11T01:52:03 <p>Information published.</p> 3.0 2026-09-25T02:38:25 <p>Information published.</p> 4.0 2026-10-02T04:10:29 <p>Information published.</p> can: peak_usb: validate uCAN receive record lengths Mariner Linux Yes CVE-2026-74455 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T15:04:28 <p>Information published.</p> 3.0 2026-09-25T02:37:25 <p>Information published.</p> 2.0 2026-09-11T01:51:39 <p>Information published.</p> 4.0 2026-10-02T04:07:19 <p>Information published.</p> can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error Mariner Linux Yes CVE-2026-74456 21684-17084 21684-17084 Low 21684-17084 3.8 3.8 CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:59:00 <p>Information published.</p> 2.0 2026-09-11T01:48:58 <p>Information published.</p> 3.0 2026-09-25T02:24:55 <p>Information published.</p> 4.0 2026-10-02T03:41:56 <p>Information published.</p> can: peak_usb: add bounds check for USB channel index Mariner Linux Yes CVE-2026-74457 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:44:05 <p>Information published.</p> 3.0 2026-09-25T01:46:09 <p>Information published.</p> 2.0 2026-09-11T01:52:11 <p>Information published.</p> 4.0 2026-10-02T04:10:52 <p>Information published.</p> can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents Mariner Linux Yes CVE-2026-74458 21684-17084 21684-17084 Moderate 21684-17084 6.6 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:50:55 <p>Information published.</p> 3.0 2026-09-25T02:35:10 <p>Information published.</p> 1.0 2026-08-23T15:03:37 <p>Information published.</p> 4.0 2026-10-02T04:00:12 <p>Information published.</p> can: ems_usb: validate CPC message lengths Mariner Linux Yes CVE-2026-74460 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:49:45 <p>Information published.</p> 3.0 2026-09-25T02:30:06 <p>Information published.</p> 1.0 2026-08-23T15:01:54 <p>Information published.</p> 4.0 2026-10-02T03:50:46 <p>Information published.</p> i2c: imx: Cancel hrtimer before clearing slave pointer Mariner Linux Yes CVE-2026-74461 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T15:04:35 <p>Information published.</p> 2.0 2026-09-11T01:51:47 <p>Information published.</p> 3.0 2026-09-25T02:37:41 <p>Information published.</p> 4.0 2026-10-02T04:08:32 <p>Information published.</p> net: openvswitch: fix skb leak on flow key update failure during ct Mariner Linux Yes CVE-2026-74464 21684-17084 21684-17084 Low 21684-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:49:54 <p>Information published.</p> 1.0 2026-08-23T15:02:41 <p>Information published.</p> 3.0 2026-09-25T02:31:31 <p>Information published.</p> 4.0 2026-10-02T03:52:20 <p>Information published.</p> net: openvswitch: fix potential UAF on meter attach failure Mariner Linux Yes CVE-2026-74465 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:10:15 <p>Information published.</p> 2.0 2026-09-11T01:54:43 <p>Information published.</p> 3.0 2026-09-25T02:01:46 <p>Information published.</p> 1.0 2026-08-23T14:55:10 <p>Information published.</p> sctp: prevent peer transport count overflow Mariner Linux Yes CVE-2026-74469 21684-17084 21684-17084 Important 21684-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:05:50 <p>Information published.</p> 1.0 2026-08-23T14:54:23 <p>Information published.</p> 3.0 2026-09-25T01:59:56 <p>Information published.</p> 2.0 2026-09-11T01:54:20 <p>Information published.</p> scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write Mariner Linux Yes CVE-2026-74470 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:58:08 <p>Information published.</p> 1.0 2026-08-23T14:50:28 <p>Information published.</p> 2.0 2026-09-11T01:53:38 <p>Information published.</p> 3.0 2026-09-25T01:53:47 <p>Information published.</p> tracing: Check return value of __register_event() in trace_module_add_events() Mariner Linux Yes CVE-2026-74471 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:59:35 <p>Information published.</p> 2.0 2026-09-11T01:49:17 <p>Information published.</p> 3.0 2026-09-25T02:26:20 <p>Information published.</p> 4.0 2026-10-02T03:44:49 <p>Information published.</p> vxlan: use pskb_network_may_pull() in route_shortcircuit() Mariner Linux Yes CVE-2026-74473 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:36:02 <p>Information published.</p> 2.0 2026-09-05T01:57:06 <p>Information published.</p> 4.0 2026-09-25T02:19:39 <p>Information published.</p> 1.0 2026-08-23T15:02:03 <p>Information published.</p> 3.0 2026-09-11T01:56:27 <p>Information published.</p> vxlan: use pskb_network_may_pull() for transmit path header pulls Mariner Linux Yes CVE-2026-74474 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:16:41 <p>Information published.</p> 3.0 2026-09-23T01:56:55 <p>Information published.</p> 4.0 2026-09-23T15:54:19 <p>Information published.</p> 5.0 2026-09-24T01:29:25 <p>Information published.</p> 1.0 2026-08-23T14:56:52 <p>Information published.</p> 2.0 2026-09-16T01:46:37 <p>Information published.</p> vxlan: use neigh_ha_snapshot() in route_shortcircuit() Mariner Linux Yes CVE-2026-74475 21684-17084 21684-17084 Low 21684-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:59:12 <p>Information published.</p> 2.0 2026-09-11T01:49:07 <p>Information published.</p> 3.0 2026-09-25T02:25:30 <p>Information published.</p> 4.0 2026-10-02T03:43:23 <p>Information published.</p> veth: convert frag_list skbs before running XDP Mariner Linux Yes CVE-2026-74476 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:27:13 <p>Information published.</p> 1.0 2026-08-23T15:00:49 <p>Information published.</p> 3.0 2026-09-23T15:00:11 <p>Information published.</p> 4.0 2026-09-24T01:37:10 <p>Information published.</p> 2.0 2026-09-23T02:04:31 <p>Information published.</p> net: pktgen: fix proc entry use-after-free Mariner Linux Yes CVE-2026-74479 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-23T15:04:54 <p>Information published.</p> 2.0 2026-09-23T02:54:44 <p>Information published.</p> 3.0 2026-09-23T15:51:29 <p>Information published.</p> 4.0 2026-09-24T01:12:04 <p>Information published.</p> 5.0 2026-10-02T04:10:04 <p>Information published.</p> net: bridge: stop fast-leave after deleting a port group Mariner Linux Yes CVE-2026-74480 21684-17084 21684-17084 Important 21684-17084 7.5 7.5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:21:08 <p>Information published.</p> 1.0 2026-08-23T14:59:22 <p>Information published.</p> 3.0 2026-09-25T02:12:34 <p>Information published.</p> 2.0 2026-09-11T01:55:22 <p>Information published.</p> mm/page_reporting: use system_freezable_wq to fix UAF during suspend Mariner Linux Yes CVE-2026-74481 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:50:27 <p>Information published.</p> 3.0 2026-09-25T02:33:25 <p>Information published.</p> 1.0 2026-08-23T15:03:20 <p>Information published.</p> 4.0 2026-10-02T03:56:17 <p>Information published.</p> mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios Mariner Linux Yes CVE-2026-74482 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:59:40 <p>Information published.</p> 3.0 2026-09-25T01:54:20 <p>Information published.</p> 1.0 2026-08-23T14:50:45 <p>Information published.</p> 2.0 2026-09-11T01:53:46 <p>Information published.</p> binfmt_misc: reject a flag character as the field delimiter Mariner Linux Yes CVE-2026-74485 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:58:00 <p>Information published.</p> 2.0 2026-09-11T01:48:39 <p>Information published.</p> 3.0 2026-09-25T02:22:58 <p>Information published.</p> 4.0 2026-10-02T03:39:01 <p>Information published.</p> binfmt_misc: restore write access when removing an entry Mariner Linux Yes CVE-2026-74487 21892-17084 21892-17084 Low 21892-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 4.0 2026-10-02T02:11:46 <p>Information published.</p> 3.0 2026-09-24T01:26:21 <p>Information published.</p> 1.0 2026-09-23T01:53:24 <p>Information published.</p> 2.0 2026-09-23T15:53:57 <p>Information published.</p> wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames Mariner Linux Yes CVE-2026-74488 21684-17084 21684-17084 Important 21684-17084 8.1 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:50:52 <p>Information published.</p> 1.0 2026-08-23T14:48:08 <p>Information published.</p> 2.0 2026-09-11T01:53:15 <p>Information published.</p> 3.0 2026-09-25T01:51:01 <p>Information published.</p> tipc: avoid use-after-free in poll trace queue dumps Mariner Linux Yes CVE-2026-74490 21684-17084 21684-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:18:08 <p>Information published.</p> 2.0 2026-09-11T01:55:07 <p>Information published.</p> 1.0 2026-08-23T14:57:16 <p>Information published.</p> 3.0 2026-09-25T02:06:11 <p>Information published.</p> netfilter: ipset: do not update comments from kernel-side hash adds Mariner Linux Yes CVE-2026-74492 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:38:59 <p>Information published.</p> 1.0 2026-08-23T15:02:36 <p>Information published.</p> 2.0 2026-09-11T01:56:43 <p>Information published.</p> 3.0 2026-09-25T02:21:29 <p>Information published.</p> net/smc: fix socket use-after-free during link group termination Mariner Linux Yes CVE-2026-74493 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:04:12 <p>Information published.</p> 1.0 2026-08-23T14:54:06 <p>Information published.</p> 2.0 2026-09-11T01:54:12 <p>Information published.</p> 3.0 2026-09-25T01:59:17 <p>Information published.</p> igbvf: Fix leak in TX DMA error cleanup Mariner Linux Yes CVE-2026-74495 21684-17084 21684-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:02:50 <p>Information published.</p> 1.0 2026-08-23T14:52:26 <p>Information published.</p> 2.0 2026-09-11T01:54:04 <p>Information published.</p> 3.0 2026-09-25T01:57:06 <p>Information published.</p> fou: Fix use-after-free in fou_create() Mariner Linux Yes CVE-2026-74496 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-09-24T01:16:09 <p>Information published.</p> 1.0 2026-08-23T14:46:12 <p>Information published.</p> 2.0 2026-09-23T02:57:03 <p>Information published.</p> 4.0 2026-09-24T02:18:51 <p>Information published.</p> 5.0 2026-10-13T17:04:26 <p>Information published.</p> 6.0 2026-10-15T02:43:16 <p>Information published.</p> ALSA: usb-audio: Clamp frame size in implicit-feedback mode Mariner Linux Yes CVE-2026-74497 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:33:08 <p>Information published.</p> 1.0 2026-08-23T15:01:40 <p>Information published.</p> 2.0 2026-09-11T01:56:11 <p>Information published.</p> 3.0 2026-09-25T02:18:42 <p>Information published.</p> ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set Mariner Linux Yes CVE-2026-74498 21684-17084 21684-17084 Moderate 21684-17084 6.6 6.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:37:29 <p>Information published.</p> 3.0 2026-09-25T02:20:56 <p>Information published.</p> 1.0 2026-08-23T15:02:28 <p>Information published.</p> 2.0 2026-09-11T01:56:35 <p>Information published.</p> ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() Mariner Linux Yes CVE-2026-74499 21684-17084 21684-17084 Moderate 21684-17084 5.7 5.7 CVSS:3.1/AV:P/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:22:37 <p>Information published.</p> 1.0 2026-08-23T14:59:52 <p>Information published.</p> 2.0 2026-09-11T01:55:30 <p>Information published.</p> 3.0 2026-09-25T02:13:14 <p>Information published.</p> ALSA: usb-audio: fix use-after-free in ump_to_endpoint() Mariner Linux Yes CVE-2026-74501 21684-17084 21684-17084 Moderate 21684-17084 4.9 4.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-09-11T01:50:37 <p>Information published.</p> 2.0 2026-09-25T02:34:04 <p>Information published.</p> 3.0 2026-10-02T03:57:34 <p>Information published.</p> Bluetooth: HIDP: validate numbered report payloads Mariner Linux Yes CVE-2026-74507 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:56:45 <p>Information published.</p> 1.0 2026-08-23T14:49:24 <p>Information published.</p> 2.0 2026-09-11T01:53:30 <p>Information published.</p> 3.0 2026-09-25T01:52:38 <p>Information published.</p> Bluetooth: HIDP: reject frames without a transaction header Mariner Linux Yes CVE-2026-74508 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:28:44 <p>Information published.</p> 1.0 2026-08-23T15:01:06 <p>Information published.</p> 4.0 2026-09-25T02:16:59 <p>Information published.</p> 2.0 2026-09-05T02:08:00 <p>Information published.</p> 3.0 2026-09-11T01:55:56 <p>Information published.</p> Bluetooth: hci_sync: Fix advertising data UAFs Mariner Linux Yes CVE-2026-74509 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21684-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T01:52:36 <p>Information published.</p> 1.0 2026-08-23T14:48:38 <p>Information published.</p> 3.0 2026-09-23T15:52:47 <p>Information published.</p> 2.0 2026-09-23T01:44:27 <p>Information published.</p> 4.0 2026-09-24T01:17:44 <p>Information published.</p> Bluetooth: mgmt: fix UAF in pair command cancellation Mariner Linux Yes CVE-2026-74510 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:49:26 <p>Information published.</p> 2.0 2026-09-11T01:53:07 <p>Information published.</p> 1.0 2026-08-23T14:47:50 <p>Information published.</p> 3.0 2026-09-25T01:50:31 <p>Information published.</p> Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Mariner Linux Yes CVE-2026-74511 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T15:03:45 <p>Information published.</p> 2.0 2026-09-11T01:51:04 <p>Information published.</p> 3.0 2026-10-02T04:01:26 <p>Information published.</p> audit: fix potential use-after-free in audit_del_rule() Mariner Linux Yes CVE-2026-74512 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:40:26 <p>Information published.</p> 1.0 2026-08-23T15:03:17 <p>Information published.</p> 2.0 2026-09-11T01:56:51 <p>Information published.</p> 3.0 2026-09-25T02:22:25 <p>Information published.</p> KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Mariner Linux Yes CVE-2026-74516 21684-17084 21684-17084 Important 21684-17084 7.5 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T15:04:41 <p>Information published.</p> 2.0 2026-09-11T01:51:55 <p>Information published.</p> 3.0 2026-09-25T02:37:56 <p>Information published.</p> 4.0 2026-10-02T04:09:30 <p>Information published.</p> mm/hugetlb: fix list corruption in allocate_file_region_entries() Mariner Linux Yes CVE-2026-74518 21684-17084 21684-17084 Important 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:15:03 <p>Information published.</p> 1.0 2026-08-23T14:56:12 <p>Information published.</p> 2.0 2026-09-11T01:54:59 <p>Information published.</p> 3.0 2026-09-25T02:03:38 <p>Information published.</p> pinctrl: devicetree: don't free uninitialized dev_name on error path Mariner Linux Yes CVE-2026-74519 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:41:57 <p>Information published.</p> 3.0 2026-09-25T02:24:15 <p>Information published.</p> 1.0 2026-08-23T15:03:58 <p>Information published.</p> 2.0 2026-09-11T01:56:59 <p>Information published.</p> qede: sync udp_tunnel ports outside qede_lock in the recovery path Mariner Linux Yes CVE-2026-74523 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T15:03:04 <p>Information published.</p> 2.0 2026-09-11T01:50:13 <p>Information published.</p> 3.0 2026-09-25T02:32:35 <p>Information published.</p> 4.0 2026-10-02T03:55:00 <p>Information published.</p> net: sxgbe: free TX rings on RX allocation failure Mariner Linux Yes CVE-2026-74525 21684-17084 21684-17084 Low 21684-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:52:27 <p>Information published.</p> 1.0 2026-08-23T14:44:37 <p>Information published.</p> 3.0 2026-09-25T01:46:44 <p>Information published.</p> 4.0 2026-10-02T04:11:38 <p>Information published.</p> Bluetooth: hci_conn: hold conn reference in abort_conn_sync() Mariner Linux Yes CVE-2026-74531 21684-17084 21684-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:P/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:52:36 <p>Information published.</p> 3.0 2026-09-25T01:47:22 <p>Information published.</p> 1.0 2026-08-23T14:45:07 <p>Information published.</p> 4.0 2026-10-02T04:12:01 <p>Information published.</p> Bluetooth: btintel: Validate length before parsing diagnostics TLV Mariner Linux Yes CVE-2026-74532 21684-17084 21684-17084 Low 21684-17084 2.1 2.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-09-11T01:49:36 <p>Information published.</p> 2.0 2026-09-25T02:28:27 <p>Information published.</p> 3.0 2026-10-02T03:47:54 <p>Information published.</p> Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp Mariner Linux Yes CVE-2026-74540 21684-17084 21684-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:30:08 <p>Information published.</p> 1.0 2026-08-23T15:01:24 <p>Information published.</p> 2.0 2026-09-11T01:56:03 <p>Information published.</p> 3.0 2026-09-25T02:17:46 <p>Information published.</p> net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() Mariner Linux Yes CVE-2026-74543 21932-17084 21892-17084 21932-17084 21892-17084 Low 21932-17084 Low 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21932-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-09-24T01:19:12 <p>Information published.</p> 3.0 2026-09-24T02:19:55 <p>Information published.</p> 1.0 2026-09-23T01:45:29 <p>Information published.</p> net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds Mariner Linux Yes CVE-2026-74544 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-23T14:58:12 <p>Information published.</p> 4.0 2026-09-24T02:28:55 <p>Information published.</p> 2.0 2026-09-23T01:59:24 <p>Information published.</p> 3.0 2026-09-24T01:32:43 <p>Information published.</p> hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read Mariner Linux Yes CVE-2026-74546 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T15:00:22 <p>Information published.</p> 2.0 2026-09-11T01:49:25 <p>Information published.</p> 3.0 2026-09-25T02:27:45 <p>Information published.</p> 4.0 2026-10-02T03:46:21 <p>Information published.</p> hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread Mariner Linux Yes CVE-2026-74547 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-09-25T02:35:55 <p>Information published.</p> 1.0 2026-08-23T15:03:53 <p>Information published.</p> 2.0 2026-09-11T01:51:14 <p>Information published.</p> 4.0 2026-10-02T04:02:46 <p>Information published.</p> forcedeth: fix UAF of txrx_stats in nv_remove Mariner Linux Yes CVE-2026-74548 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:45:06 <p>Information published.</p> 2.0 2026-09-11T01:52:43 <p>Information published.</p> 1.0 2026-08-23T14:45:23 <p>Information published.</p> 3.0 2026-09-25T01:47:58 <p>Information published.</p> hwmon: (nct6775-core) Prevent access to unsupported weight registers Mariner Linux Yes CVE-2026-74549 21684-17084 21684-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:43:23 <p>Information published.</p> 1.0 2026-08-23T15:04:05 <p>Information published.</p> 2.0 2026-09-11T01:57:06 <p>Information published.</p> 3.0 2026-09-25T02:24:45 <p>Information published.</p> net: do not send ICMP/NDISC Redirects when peer allocation fails Mariner Linux Yes CVE-2026-74550 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:34:34 <p>Information published.</p> 1.0 2026-08-23T15:01:55 <p>Information published.</p> 2.0 2026-09-11T01:56:19 <p>Information published.</p> 3.0 2026-09-25T02:19:08 <p>Information published.</p> hwmon: (lm90) Only report alarms if driver is ready Mariner Linux Yes CVE-2026-74552 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:55:15 <p>Information published.</p> 1.0 2026-08-23T14:49:09 <p>Information published.</p> 2.0 2026-09-11T01:53:22 <p>Information published.</p> 3.0 2026-09-25T01:52:06 <p>Information published.</p> hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Mariner Linux Yes CVE-2026-74553 21684-17084 21684-17084 Moderate 21684-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:19:36 <p>Information published.</p> 1.0 2026-08-23T14:59:00 <p>Information published.</p> 3.0 2026-09-25T02:11:22 <p>Information published.</p> 2.0 2026-09-11T01:55:15 <p>Information published.</p> scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer Mariner Linux Yes CVE-2026-74556 21684-17084 21684-17084 Important 21684-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:44:23 <p>Information published.</p> 2.0 2026-09-11T01:52:19 <p>Information published.</p> 3.0 2026-10-02T04:11:15 <p>Information published.</p> scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer Mariner Linux Yes CVE-2026-74557 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:07:16 <p>Information published.</p> 1.0 2026-08-23T14:54:39 <p>Information published.</p> 2.0 2026-09-11T01:54:28 <p>Information published.</p> 3.0 2026-09-25T02:00:32 <p>Information published.</p> xsk: reclaim invalid Tx descriptors in ZC batch path Mariner Linux Yes CVE-2026-74558 21892-17084 21932-17084 21892-17084 21932-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-24T01:23:00 <p>Information published.</p> 1.0 2026-09-23T01:49:55 <p>Information published.</p> 3.0 2026-09-24T02:23:24 <p>Information published.</p> xsk: drain continuation descs after overflow in xsk_build_skb() Mariner Linux Yes CVE-2026-74559 21932-17084 21892-17084 21932-17084 21892-17084 Low 21932-17084 Low 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 3.0 2026-09-24T02:33:20 <p>Information published.</p> 1.0 2026-09-23T02:08:06 <p>Information published.</p> 2.0 2026-09-24T01:40:52 <p>Information published.</p> xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx Mariner Linux Yes CVE-2026-74560 21892-17084 21932-17084 21892-17084 21932-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T01:51:07 <p>Information published.</p> 2.0 2026-09-24T01:24:18 <p>Information published.</p> 3.0 2026-09-24T02:24:42 <p>Information published.</p> rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() Mariner Linux Yes CVE-2026-74563 21684-17084 21684-17084 Important 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T01:46:31 <p>Information published.</p> 2.0 2026-09-11T01:52:51 <p>Information published.</p> 3.0 2026-09-25T01:48:55 <p>Information published.</p> 1.0 2026-08-23T14:46:45 <p>Information published.</p> netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH Mariner Linux Yes CVE-2026-74564 21684-17084 21684-17084 Low 21684-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:44:47 <p>Information published.</p> 2.0 2026-09-11T01:57:15 <p>Information published.</p> 3.0 2026-09-25T02:25:21 <p>Information published.</p> 1.0 2026-08-23T14:42:32 <p>Information published.</p> netfilter: nf_tables: make nft_object rhltable per table Mariner Linux Yes CVE-2026-74565 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 5.0 2026-09-24T02:34:01 <p>Information published.</p> 1.0 2026-08-23T15:02:12 <p>Information published.</p> 2.0 2026-09-16T01:46:51 <p>Information published.</p> 3.0 2026-09-23T02:09:41 <p>Information published.</p> 4.0 2026-09-24T01:42:51 <p>Information published.</p> keys: make keyring key-chunk byte order agree with keyring_diff_objects() Mariner Linux Yes CVE-2026-74566 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:50:04 <p>Information published.</p> 3.0 2026-09-25T02:32:04 <p>Information published.</p> 1.0 2026-08-23T15:02:56 <p>Information published.</p> 4.0 2026-10-02T03:53:46 <p>Information published.</p> keys: fix out-of-bounds read in keyring_get_key_chunk() Mariner Linux Yes CVE-2026-74567 21684-17084 21684-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 3.0 2026-09-25T02:36:39 <p>Information published.</p> 1.0 2026-08-23T15:04:01 <p>Information published.</p> 2.0 2026-09-11T01:51:22 <p>Information published.</p> 4.0 2026-10-02T04:04:04 <p>Information published.</p> netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Mariner Linux Yes CVE-2026-74569 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 1.0 2026-08-23T14:58:35 <p>Information published.</p> 2.0 2026-09-11T01:48:49 <p>Information published.</p> 3.0 2026-09-25T02:23:26 <p>Information published.</p> 4.0 2026-10-02T03:40:38 <p>Information published.</p> btrfs: skip global block reserve accounting for rescue mounts Mariner Linux Yes CVE-2026-74571 21892-17084 21932-17084 21892-17084 21932-17084 Moderate 21892-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-09-23T01:57:22 <p>Information published.</p> 2.0 2026-09-24T01:30:06 <p>Information published.</p> 3.0 2026-09-24T02:27:12 <p>Information published.</p> btrfs: zoned: fix deadlock between metadata writeback and transaction commit Mariner Linux Yes CVE-2026-74572 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 2.0 2026-09-11T01:51:30 <p>Information published.</p> 3.0 2026-09-25T02:37:02 <p>Information published.</p> 1.0 2026-08-23T15:04:22 <p>Information published.</p> 4.0 2026-10-02T04:05:24 <p>Information published.</p> net: mpls: initialize rtm_tos in mpls_getroute() Mariner Linux Yes CVE-2026-74577 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T02:13:26 <p>Information published.</p> 1.0 2026-08-23T14:55:57 <p>Information published.</p> 2.0 2026-09-11T01:54:51 <p>Information published.</p> 3.0 2026-09-25T02:03:08 <p>Information published.</p> netfilter: nft_payload: fix mask build for partial field offload Mariner Linux Yes CVE-2026-74579 21684-17084 21684-17084 Low 21684-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:46:16 <p>Information published.</p> 1.0 2026-08-20T21:58:42 <p>Information published.</p> 2.0 2026-09-05T01:57:25 <p>Information published.</p> 4.0 2026-09-25T02:29:17 <p>Information published.</p> 3.0 2026-09-11T01:57:24 <p>Information published.</p> vhost: reset the vring metadata cache on vring reconfiguration Mariner Linux Yes CVE-2026-74580 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:49:32 <p>Information published.</p> 1.0 2026-08-23T01:03:08 <p>Information published.</p> 2.0 2026-08-24T14:43:49 <p>Information published.</p> 3.0 2026-09-11T01:57:56 <p>Information published.</p> 4.0 2026-09-25T02:34:00 <p>Information published.</p> net: ipv6: clear suppressed fib6 rule result Mariner Linux Yes CVE-2026-74581 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:53:56 <p>Information published.</p> 1.0 2026-08-23T01:03:26 <p>Information published.</p> 2.0 2026-08-24T14:44:07 <p>Information published.</p> 4.0 2026-09-25T02:35:16 <p>Information published.</p> 3.0 2026-09-11T01:44:21 <p>Information published.</p> packet: use consistent hard_header_len in non-ring send paths Mariner Linux Yes CVE-2026-74582 21684-17084 21684-17084 Moderate 21684-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:50:58 <p>Information published.</p> 1.0 2026-08-23T01:03:14 <p>Information published.</p> 2.0 2026-08-24T14:43:55 <p>Information published.</p> 3.0 2026-09-11T01:58:04 <p>Information published.</p> 4.0 2026-09-25T02:34:29 <p>Information published.</p> net/sched: cls_route: fix fastmap use-after-free on filter Mariner Linux Yes CVE-2026-74583 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:52:23 <p>Information published.</p> 1.0 2026-08-23T01:03:20 <p>Information published.</p> 2.0 2026-08-24T14:44:01 <p>Information published.</p> 3.0 2026-09-11T01:44:12 <p>Information published.</p> 4.0 2026-09-25T02:34:50 <p>Information published.</p> sctp: clear new_transport when removing a peer Mariner Linux Yes CVE-2026-74586 21684-17084 21684-17084 Important 21684-17084 7.0 7.0 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:16:27 <p>Information published.</p> 1.0 2026-08-24T01:02:33 <p>Information published.</p> 2.0 2026-08-24T14:47:02 <p>Information published.</p> 4.0 2026-09-25T02:28:21 <p>Information published.</p> 3.0 2026-09-11T01:54:19 <p>Information published.</p> sctp: fix use-after-free of cached ASCONF chunk Mariner Linux Yes CVE-2026-74587 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:31:59 <p>Information published.</p> 1.0 2026-08-24T01:04:46 <p>Information published.</p> 3.0 2026-09-11T01:47:57 <p>Information published.</p> 4.0 2026-09-25T01:57:38 <p>Information published.</p> 2.0 2026-08-24T14:48:07 <p>Information published.</p> sctp: keep chunk->transport in step with the list it is queued on Mariner Linux Yes CVE-2026-74588 21684-17084 21684-17084 Moderate 21684-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:00:22 <p>Information published.</p> 1.0 2026-08-24T01:08:27 <p>Information published.</p> 2.0 2026-08-24T14:51:12 <p>Information published.</p> 3.0 2026-09-11T01:51:07 <p>Information published.</p> 4.0 2026-09-25T02:10:28 <p>Information published.</p> bpf, sockmap: Fix sk_redir use-after-free in send verdict Mariner Linux Yes CVE-2026-74589 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:54:00 <p>Information published.</p> 1.0 2026-08-24T01:07:39 <p>Information published.</p> 2.0 2026-08-24T14:50:33 <p>Information published.</p> 3.0 2026-09-11T01:50:23 <p>Information published.</p> 4.0 2026-09-25T02:08:11 <p>Information published.</p> ima: Instantiate file_truncate and path_truncate hooks Mariner Linux Yes CVE-2026-74592 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-24T01:02:05 <p>Information published.</p> 4.0 2026-09-24T02:20:12 <p>Information published.</p> 2.0 2026-08-24T14:46:35 <p>Information published.</p> 3.0 2026-09-23T02:36:01 <p>Information published.</p> 5.0 2026-09-24T02:44:05 <p>Information published.</p> sched/psi: Shut down rtpoll_timer in psi_cgroup_free() Mariner Linux Yes CVE-2026-74594 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:00:08 <p>Information published.</p> 2.0 2026-08-24T14:44:20 <p>Information published.</p> 3.0 2026-09-11T01:53:00 <p>Information published.</p> 4.0 2026-09-25T02:19:10 <p>Information published.</p> 1.0 2026-08-24T01:10:54 <p>Information published.</p> fscrypt: use the mount idmap for the owner check in fscrypt_ioctl_set_policy() Mariner Linux Yes CVE-2026-74595 21684-17084 21684-17084 Moderate 21684-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:57:44 <p>Information published.</p> 1.0 2026-08-24T01:08:08 <p>Information published.</p> 2.0 2026-08-24T14:50:56 <p>Information published.</p> 4.0 2026-09-25T02:09:29 <p>Information published.</p> 3.0 2026-09-11T01:50:49 <p>Information published.</p> ip6_tunnel: clear skb2->cb[] in ip6ip6_err() Mariner Linux Yes CVE-2026-74597 21684-17084 21684-17084 Important 21684-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:07:31 <p>Information published.</p> 1.0 2026-08-24T01:01:37 <p>Information published.</p> 2.0 2026-08-24T14:46:12 <p>Information published.</p> 3.0 2026-09-11T01:53:39 <p>Information published.</p> 4.0 2026-09-25T02:24:59 <p>Information published.</p> ipv6: fix Route Information option length validation Mariner Linux Yes CVE-2026-74598 21684-17084 21684-17084 Moderate 21684-17084 5.4 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:55:12 <p>Information published.</p> 1.0 2026-08-24T01:07:46 <p>Information published.</p> 2.0 2026-08-24T14:50:40 <p>Information published.</p> 3.0 2026-09-11T01:50:31 <p>Information published.</p> 4.0 2026-09-25T02:08:38 <p>Information published.</p> mm/ptdump: always stabilise against page table freeing using init_mm Mariner Linux Yes CVE-2026-74599 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21892-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T01:48:15 <p>Information published.</p> 2.0 2026-08-24T14:43:19 <p>Information published.</p> 3.0 2026-09-23T02:28:18 <p>Information published.</p> 1.0 2026-08-24T01:09:49 <p>Information published.</p> 4.0 2026-09-23T15:28:18 <p>Information published.</p> 5.0 2026-09-24T02:12:28 <p>Information published.</p> mm/page_table_check: skip special zero mappings Mariner Linux Yes CVE-2026-74600 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-24T01:03:55 <p>Information published.</p> 2.0 2026-08-24T14:47:21 <p>Information published.</p> ring-buffer: Use current_context for safe per-CPU buffer swap Mariner Linux Yes CVE-2026-74601 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 4.0 2026-09-23T02:24:21 <p>Information published.</p> 6.0 2026-09-24T02:05:02 <p>Information published.</p> 1.0 2026-08-24T01:05:05 <p>Information published.</p> 2.0 2026-08-24T14:48:23 <p>Information published.</p> 3.0 2026-09-05T02:07:58 <p>Information published.</p> 5.0 2026-09-23T15:25:34 <p>Information published.</p> 7.0 2026-10-02T14:29:13 <p>Information published.</p> ptp: ocp: Fix board ID over-read Mariner Linux Yes CVE-2026-74603 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 1.0 2026-08-24T01:11:31 <p>Information published.</p> 2.0 2026-08-24T14:45:01 <p>Information published.</p> Revert "thermal/drivers/hwmon: Cleanup coding style a bit" Mariner Linux Yes CVE-2026-74604 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:58:35 <p>Information published.</p> 4.0 2026-09-25T02:18:40 <p>Information published.</p> 1.0 2026-08-24T01:10:47 <p>Information published.</p> 2.0 2026-08-24T14:44:14 <p>Information published.</p> 3.0 2026-09-11T01:52:53 <p>Information published.</p> eventfs: Use children field for rcu head and add memory barriers Mariner Linux Yes CVE-2026-74605 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-24T01:03:04 <p>Information published.</p> 2.0 2026-08-24T14:46:30 <p>Information published.</p> 3.0 2026-09-23T02:22:21 <p>Information published.</p> 4.0 2026-09-24T02:02:47 <p>Information published.</p> 5.0 2026-09-24T02:39:27 <p>Information published.</p> 6.0 2026-10-24T14:44:37 <p>Information published.</p> eventfs: Fix use-after-free in eventfs_remove_rec() Mariner Linux Yes CVE-2026-74606 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-24T01:09:24 <p>Information published.</p> 2.0 2026-08-24T14:42:53 <p>Information published.</p> KVM: SVM: Serialize accesses to the owner and mirror list with separate lock Mariner Linux Yes CVE-2026-74607 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T03:13:00 <p>Information published.</p> 1.0 2026-08-24T01:02:58 <p>Information published.</p> 5.0 2026-09-24T02:01:44 <p>Information published.</p> 2.0 2026-08-24T14:46:24 <p>Information published.</p> 3.0 2026-09-23T02:21:48 <p>Information published.</p> 4.0 2026-09-23T15:23:41 <p>Information published.</p> smb: client: Fix use-after-free in cifs_try_adding_channels() Mariner Linux Yes CVE-2026-74608 21684-17084 21684-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:27:32 <p>Information published.</p> 2.0 2026-08-24T14:47:44 <p>Information published.</p> 3.0 2026-09-11T01:47:39 <p>Information published.</p> 4.0 2026-09-25T01:56:02 <p>Information published.</p> 1.0 2026-08-24T01:04:21 <p>Information published.</p> tipc: read le->link under the node lock in tipc_node_link_down() Mariner Linux Yes CVE-2026-74609 21684-17084 21684-17084 Moderate 21684-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:02:49 <p>Information published.</p> 4.0 2026-09-25T01:46:11 <p>Information published.</p> 1.0 2026-08-24T01:02:04 <p>Information published.</p> 2.0 2026-08-24T14:45:32 <p>Information published.</p> 3.0 2026-09-11T01:45:19 <p>Information published.</p> tls: don't leave a full plaintext sk_msg ring unpushed Mariner Linux Yes CVE-2026-74610 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:56:44 <p>Information published.</p> 1.0 2026-08-24T01:01:29 <p>Information published.</p> 2.0 2026-08-24T14:44:59 <p>Information published.</p> 3.0 2026-09-11T01:44:42 <p>Information published.</p> 4.0 2026-09-25T02:36:12 <p>Information published.</p> tls: rx: restore msg_iter before TLS 1.3 optimistic retry Mariner Linux Yes CVE-2026-74611 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Important 21684-17084 Important 21892-17084 Important 21932-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L 21684-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L 21892-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 4.0 2026-09-24T02:17:34 <p>Information published.</p> 1.0 2026-08-24T01:12:02 <p>Information published.</p> 2.0 2026-08-24T14:45:32 <p>Information published.</p> 3.0 2026-09-23T02:33:03 <p>Information published.</p> 5.0 2026-09-24T02:43:05 <p>Information published.</p> veth: fix skb length accounting after XDP frag adjustment Mariner Linux Yes CVE-2026-74612 21684-17084 21684-17084 Moderate 21684-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:59:47 <p>Information published.</p> 3.0 2026-09-11T01:45:00 <p>Information published.</p> 1.0 2026-08-24T01:01:44 <p>Information published.</p> 2.0 2026-08-24T14:45:13 <p>Information published.</p> 4.0 2026-09-25T02:36:56 <p>Information published.</p> vsock/virtio: avoid refilling the RX queue after teardown Mariner Linux Yes CVE-2026-74613 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:05:42 <p>Information published.</p> 2.0 2026-08-24T14:51:55 <p>Information published.</p> 4.0 2026-09-25T02:12:39 <p>Information published.</p> 1.0 2026-08-24T01:09:12 <p>Information published.</p> 3.0 2026-09-11T01:51:32 <p>Information published.</p> vsock/virtio: read virtqueues under worker locks Mariner Linux Yes CVE-2026-74614 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:59:02 <p>Information published.</p> 2.0 2026-08-24T14:51:01 <p>Information published.</p> 4.0 2026-09-25T02:10:00 <p>Information published.</p> 1.0 2026-08-24T01:08:15 <p>Information published.</p> 3.0 2026-09-11T01:50:57 <p>Information published.</p> vxlan: do not arm the ageing timer on a device that is down Mariner Linux Yes CVE-2026-74615 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:10:28 <p>Information published.</p> 1.0 2026-08-24T01:01:51 <p>Information published.</p> 3.0 2026-09-11T01:53:47 <p>Information published.</p> 4.0 2026-09-25T02:25:48 <p>Information published.</p> 2.0 2026-08-24T14:46:23 <p>Information published.</p> xdp: reject clones that overrun skb_shared_info tailroom Mariner Linux Yes CVE-2026-74616 21684-17084 21684-17084 Moderate 21684-17084 6.0 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:20:15 <p>Information published.</p> 2.0 2026-08-24T14:47:09 <p>Information published.</p> 3.0 2026-09-11T01:46:53 <p>Information published.</p> 4.0 2026-09-25T01:53:16 <p>Information published.</p> 1.0 2026-08-24T01:03:41 <p>Information published.</p> ovl: don't warn when the mount is completed from another user namespace Mariner Linux Yes CVE-2026-74619 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:26:04 <p>Information published.</p> 1.0 2026-08-24T01:04:15 <p>Information published.</p> 3.0 2026-09-11T01:47:29 <p>Information published.</p> 2.0 2026-08-24T14:47:38 <p>Information published.</p> 4.0 2026-09-25T01:55:22 <p>Information published.</p> net/sched: act_gact, act_police: range check the fallback control action Mariner Linux Yes CVE-2026-74620 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:34:57 <p>Information published.</p> 2.0 2026-08-24T14:48:18 <p>Information published.</p> 1.0 2026-08-24T01:04:58 <p>Information published.</p> 3.0 2026-09-11T01:48:16 <p>Information published.</p> 4.0 2026-09-25T01:58:57 <p>Information published.</p> net/sched: act_ct: fix sk_buff leak when the header checks reject a packet Mariner Linux Yes CVE-2026-74621 21684-17084 21684-17084 Important 21684-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:10:16 <p>Information published.</p> 1.0 2026-08-24T01:02:45 <p>Information published.</p> 2.0 2026-08-24T14:46:12 <p>Information published.</p> 3.0 2026-09-11T01:45:56 <p>Information published.</p> 4.0 2026-09-25T01:49:00 <p>Information published.</p> net: atlantic: free RX pages of consumed but not refilled buffers Mariner Linux Yes CVE-2026-74622 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:05:44 <p>Information published.</p> 2.0 2026-08-24T14:45:47 <p>Information published.</p> 3.0 2026-09-11T01:45:36 <p>Information published.</p> 1.0 2026-08-24T01:02:18 <p>Information published.</p> 4.0 2026-09-25T01:47:29 <p>Information published.</p> net: atlantic: free stranded TX buffers on ring deinit Mariner Linux Yes CVE-2026-74623 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:41:07 <p>Information published.</p> 1.0 2026-08-24T01:06:05 <p>Information published.</p> 2.0 2026-08-24T14:49:07 <p>Information published.</p> 4.0 2026-09-11T01:48:55 <p>Information published.</p> 3.0 2026-09-05T01:49:38 <p>Information published.</p> 5.0 2026-09-25T02:02:26 <p>Information published.</p> netfilter: nf_conntrack: defer invalid log until after unlock Mariner Linux Yes CVE-2026-74624 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:36:40 <p>Information published.</p> 2.0 2026-08-24T14:48:34 <p>Information published.</p> 1.0 2026-08-24T01:05:27 <p>Information published.</p> 3.0 2026-09-05T01:47:14 <p>Information published.</p> 4.0 2026-09-11T01:48:26 <p>Information published.</p> 5.0 2026-09-25T01:59:58 <p>Information published.</p> netfilter: bridge: release template ct on non-IP path Mariner Linux Yes CVE-2026-74625 21684-17084 21684-17084 Moderate 21684-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:52:42 <p>Information published.</p> 1.0 2026-08-24T01:10:16 <p>Information published.</p> 2.0 2026-08-24T14:43:44 <p>Information published.</p> 4.0 2026-09-25T02:17:07 <p>Information published.</p> 3.0 2026-09-11T01:52:28 <p>Information published.</p> NTB: ntb_netdev: Preserve RX queue depth on allocation failure Mariner Linux Yes CVE-2026-74626 21684-17084 21684-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 2.0 2026-08-24T14:50:45 <p>Information published.</p> 1.0 2026-08-24T01:07:56 <p>Information published.</p> net/x25: fix use-after-free of the socket by its timers Mariner Linux Yes CVE-2026-74628 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T03:08:59 <p>Information published.</p> 2.0 2026-08-24T14:46:06 <p>Information published.</p> 4.0 2026-09-23T15:23:16 <p>Information published.</p> 1.0 2026-08-24T01:02:38 <p>Information published.</p> 3.0 2026-09-23T02:20:59 <p>Information published.</p> 5.0 2026-09-24T02:01:05 <p>Information published.</p> ipv6: prevent in6_dev_get() from resurrecting inet6_dev Mariner Linux Yes CVE-2026-74630 21684-17084 21684-17084 Important 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:01:21 <p>Information published.</p> 2.0 2026-08-24T14:45:24 <p>Information published.</p> 3.0 2026-09-11T01:45:09 <p>Information published.</p> 4.0 2026-09-25T02:37:18 <p>Information published.</p> 1.0 2026-08-24T01:01:57 <p>Information published.</p> net: smc: fix splice entry lifetime imbalance in smc_rx_splice Mariner Linux Yes CVE-2026-74631 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:24:31 <p>Information published.</p> 1.0 2026-08-24T01:04:09 <p>Information published.</p> 2.0 2026-08-24T14:47:33 <p>Information published.</p> 3.0 2026-09-11T01:47:20 <p>Information published.</p> 4.0 2026-09-25T01:54:45 <p>Information published.</p> mm/huge_memory: fix huge_zero_pfn race Mariner Linux Yes CVE-2026-74632 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T03:30:27 <p>Information published.</p> 2.0 2026-08-24T14:47:56 <p>Information published.</p> 3.0 2026-09-23T02:23:47 <p>Information published.</p> 1.0 2026-08-24T01:04:33 <p>Information published.</p> 4.0 2026-09-23T15:25:07 <p>Information published.</p> 5.0 2026-09-24T02:04:15 <p>Information published.</p> fbdev: bitblit: bound-check glyph index in bit_cursor() Mariner Linux Yes CVE-2026-74635 21684-17084 21684-17084 Moderate 21684-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:17:19 <p>Information published.</p> 2.0 2026-08-24T14:46:49 <p>Information published.</p> 3.0 2026-09-11T01:46:34 <p>Information published.</p> 4.0 2026-09-25T01:51:49 <p>Information published.</p> 1.0 2026-08-24T01:03:23 <p>Information published.</p> tracing: Fix race between update_event_fields and, event_define_fields Mariner Linux Yes CVE-2026-74636 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:03:07 <p>Information published.</p> 2.0 2026-08-24T14:45:13 <p>Information published.</p> 4.0 2026-09-25T02:22:06 <p>Information published.</p> 1.0 2026-08-24T01:11:43 <p>Information published.</p> 3.0 2026-09-11T01:53:16 <p>Information published.</p> perf/core: Fix group leader use-after-free after sibling detach Mariner Linux Yes CVE-2026-74637 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:08:58 <p>Information published.</p> 2.0 2026-08-24T14:46:17 <p>Information published.</p> 1.0 2026-08-24T01:01:44 <p>Information published.</p> 3.0 2026-09-23T02:35:32 <p>Information published.</p> 4.0 2026-09-23T15:34:26 <p>Information published.</p> 5.0 2026-09-24T02:18:57 <p>Information published.</p> drm/v3d: Serialize the scheduler timeout handlers Mariner Linux Yes CVE-2026-74638 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 2.0 2026-08-24T14:43:38 <p>Information published.</p> 1.0 2026-08-24T01:10:10 <p>Information published.</p> ALSA: usx2y: bound the hwdep mmap fault offset Mariner Linux Yes CVE-2026-74641 21684-17084 21684-17084 Important 21684-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 1.0 2026-08-24T01:01:50 <p>Information published.</p> 2.0 2026-08-24T14:45:19 <p>Information published.</p> misc: fastrpc: take fl->lock when moving mmaps on interrupted invoke Mariner Linux Yes CVE-2026-74646 21684-17084 21684-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H 21684-17084 2.0 2026-08-24T14:46:50 <p>Information published.</p> 1.0 2026-08-24T01:02:19 <p>Information published.</p> misc: fastrpc: Remove buffer from list prior to unmap operation Mariner Linux Yes CVE-2026-74647 21684-17084 21684-17084 Moderate 21684-17084 5.8 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H 21684-17084 1.0 2026-08-24T01:11:25 <p>Information published.</p> 2.0 2026-08-24T14:44:55 <p>Information published.</p> staging: rtl8723bs: fix OOB read in WMM_param_handler() Mariner Linux Yes CVE-2026-74650 21684-17084 21684-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21684-17084 2.0 2026-08-24T14:51:06 <p>Information published.</p> 1.0 2026-08-24T01:08:21 <p>Information published.</p> serial: 8250_of: clear stuck empty-FIFO RX-timeout on LPC32xx Mariner Linux Yes CVE-2026-74653 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-08-24T14:49:43 <p>Information published.</p> 4.0 2026-09-24T02:08:00 <p>Information published.</p> 5.0 2026-09-24T02:40:34 <p>Information published.</p> 1.0 2026-08-24T01:06:36 <p>Information published.</p> 3.0 2026-09-23T02:25:33 <p>Information published.</p> serial: 8250_dma: Clear stale RX state on shutdown Mariner Linux Yes CVE-2026-74654 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:05:54 <p>Information published.</p> 1.0 2026-08-24T01:01:30 <p>Information published.</p> 2.0 2026-08-24T14:46:05 <p>Information published.</p> 4.0 2026-09-25T02:24:24 <p>Information published.</p> 3.0 2026-09-11T01:53:31 <p>Information published.</p> serial: qcom-geni: fix TX DMA buffer flush Mariner Linux Yes CVE-2026-74655 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 2.0 2026-08-24T14:44:08 <p>Information published.</p> 1.0 2026-08-24T01:10:41 <p>Information published.</p> ipv4: fix use-after-free in fib_nhc_update_mtu() Mariner Linux Yes CVE-2026-74656 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:51:11 <p>Information published.</p> 1.0 2026-08-24T01:07:27 <p>Information published.</p> 2.0 2026-08-24T14:50:22 <p>Information published.</p> 3.0 2026-09-11T01:50:02 <p>Information published.</p> 4.0 2026-09-25T02:06:57 <p>Information published.</p> ipv4: Fix fib_nlmsg_size() for RTA_VIA nexthops Mariner Linux Yes CVE-2026-74657 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:51:11 <p>Information published.</p> 2.0 2026-08-24T14:43:32 <p>Information published.</p> 4.0 2026-09-25T02:16:40 <p>Information published.</p> 1.0 2026-08-24T01:10:03 <p>Information published.</p> 3.0 2026-09-11T01:52:20 <p>Information published.</p> futex: Prevent robust futex exit race some more Mariner Linux Yes CVE-2026-74658 21684-17084 21684-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:54:06 <p>Information published.</p> 2.0 2026-08-24T14:43:50 <p>Information published.</p> 4.0 2026-09-25T02:17:32 <p>Information published.</p> 1.0 2026-08-24T01:10:22 <p>Information published.</p> 3.0 2026-09-11T01:52:36 <p>Information published.</p> net: bridge: mrp: fix uninitialised bytes on the wire Mariner Linux Yes CVE-2026-74659 21684-17084 21684-17084 Low 21684-17084 2.3 2.3 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N 21684-17084 1.0 2026-08-24T01:11:56 <p>Information published.</p> 2.0 2026-08-24T14:45:26 <p>Information published.</p> mac802154: fix netdev use-after-free in beacon worker Mariner Linux Yes CVE-2026-74661 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:08:36 <p>Information published.</p> 2.0 2026-08-24T14:43:00 <p>Information published.</p> 4.0 2026-09-25T02:14:00 <p>Information published.</p> 1.0 2026-08-24T01:09:31 <p>Information published.</p> 3.0 2026-09-11T01:51:48 <p>Information published.</p> inet: frags: publish queues before arming timer Mariner Linux Yes CVE-2026-74662 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21684-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T04:03:10 <p>Information published.</p> 2.0 2026-08-24T14:51:24 <p>Information published.</p> 5.0 2026-09-24T02:11:07 <p>Information published.</p> 1.0 2026-08-24T01:08:40 <p>Information published.</p> 3.0 2026-09-23T02:26:38 <p>Information published.</p> 4.0 2026-09-23T15:27:42 <p>Information published.</p> net/sched: reject overly deep qdisc hierarchies Mariner Linux Yes CVE-2026-74663 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:15:51 <p>Information published.</p> 1.0 2026-08-24T01:03:16 <p>Information published.</p> 2.0 2026-08-24T14:46:43 <p>Information published.</p> 3.0 2026-09-11T01:46:25 <p>Information published.</p> 4.0 2026-09-25T01:51:14 <p>Information published.</p> net: openvswitch: reallocate update replies for mismatched IDs Mariner Linux Yes CVE-2026-74664 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:38:08 <p>Information published.</p> 2.0 2026-08-24T14:48:40 <p>Information published.</p> 3.0 2026-09-05T01:57:28 <p>Information published.</p> 4.0 2026-09-11T01:48:36 <p>Information published.</p> 5.0 2026-09-25T02:00:34 <p>Information published.</p> 1.0 2026-08-24T01:05:33 <p>Information published.</p> packet: synchronize pressure clearing with ring reconfiguration Mariner Linux Yes CVE-2026-74666 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:04:35 <p>Information published.</p> 1.0 2026-08-24T01:12:21 <p>Information published.</p> 2.0 2026-08-24T14:45:56 <p>Information published.</p> 3.0 2026-09-11T01:53:24 <p>Information published.</p> 4.0 2026-09-25T02:23:54 <p>Information published.</p> net/packet: reset the MAC header on the packet-socket transmit path Mariner Linux Yes CVE-2026-74667 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:28:59 <p>Information published.</p> 2.0 2026-08-24T14:47:50 <p>Information published.</p> 3.0 2026-09-11T01:47:48 <p>Information published.</p> 1.0 2026-08-24T01:04:27 <p>Information published.</p> 4.0 2026-09-25T01:56:35 <p>Information published.</p> packet: use consistent hard_header_len in TX_RING send path Mariner Linux Yes CVE-2026-74668 21684-17084 21684-17084 Moderate 21684-17084 6.4 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:14:51 <p>Information published.</p> 2.0 2026-08-24T14:46:56 <p>Information published.</p> 3.0 2026-09-11T01:54:11 <p>Information published.</p> 4.0 2026-09-25T02:27:52 <p>Information published.</p> 1.0 2026-08-24T01:02:25 <p>Information published.</p> ipvs: clear IPv4 options after rebasing tunnel ICMP errors Mariner Linux Yes CVE-2026-74669 21684-17084 21684-17084 Important 21684-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:14:25 <p>Information published.</p> 1.0 2026-08-24T01:03:10 <p>Information published.</p> 2.0 2026-08-24T14:46:38 <p>Information published.</p> 3.0 2026-09-11T01:46:15 <p>Information published.</p> 4.0 2026-09-25T01:50:41 <p>Information published.</p> ipvs: stop estimator after disabled calc phase Mariner Linux Yes CVE-2026-74670 21684-17084 21684-17084 Moderate 21684-17084 5.7 5.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:13:20 <p>Information published.</p> 1.0 2026-08-24T01:02:12 <p>Information published.</p> 2.0 2026-08-24T14:46:43 <p>Information published.</p> 3.0 2026-09-11T01:54:03 <p>Information published.</p> 4.0 2026-09-25T02:27:26 <p>Information published.</p> ima: fix out-of-bounds read in xattr_verify() Mariner Linux Yes CVE-2026-74671 21684-17084 21684-17084 Low 21684-17084 3.4 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:49:44 <p>Information published.</p> 2.0 2026-08-24T14:50:16 <p>Information published.</p> 3.0 2026-09-11T01:49:52 <p>Information published.</p> 1.0 2026-08-24T01:07:20 <p>Information published.</p> 4.0 2026-09-25T02:06:21 <p>Information published.</p> mm/vmalloc: acquire init_mm lock on huge vmap to avoid ptdump UAF Mariner Linux Yes CVE-2026-74672 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21892-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T01:57:01 <p>Information published.</p> 1.0 2026-08-24T01:10:34 <p>Information published.</p> 2.0 2026-08-24T14:44:03 <p>Information published.</p> 5.0 2026-09-24T02:13:03 <p>Information published.</p> 3.0 2026-09-23T02:28:36 <p>Information published.</p> 4.0 2026-09-23T15:28:42 <p>Information published.</p> Input: evdev - fix information leak in evdev_pass_values() Mariner Linux Yes CVE-2026-74673 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:42:31 <p>Information published.</p> 2.0 2026-08-24T14:49:20 <p>Information published.</p> 3.0 2026-09-05T01:58:50 <p>Information published.</p> 4.0 2026-09-11T01:49:05 <p>Information published.</p> 1.0 2026-08-24T01:06:17 <p>Information published.</p> 5.0 2026-09-25T02:02:55 <p>Information published.</p> vt: stabilize tty reference in kbd_keycode with tty_port_tty_get Mariner Linux Yes CVE-2026-74675 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:01:42 <p>Information published.</p> 3.0 2026-09-11T01:51:16 <p>Information published.</p> 4.0 2026-09-25T02:10:57 <p>Information published.</p> 1.0 2026-08-24T01:08:33 <p>Information published.</p> 2.0 2026-08-24T14:51:19 <p>Information published.</p> vt: add permission check for KDSKBMETA ioctl Mariner Linux Yes CVE-2026-74676 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:56:25 <p>Information published.</p> 2.0 2026-08-24T14:50:50 <p>Information published.</p> 1.0 2026-08-24T01:08:02 <p>Information published.</p> 3.0 2026-09-11T01:50:40 <p>Information published.</p> 4.0 2026-09-25T02:09:00 <p>Information published.</p> net: usb: ipheth: fix carrier_work UAF on disconnect Mariner Linux Yes CVE-2026-74677 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 4.2 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.2 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.2 4.2 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 2.0 2026-08-24T14:48:50 <p>Information published.</p> 3.0 2026-09-05T01:48:13 <p>Information published.</p> 4.0 2026-09-23T02:24:49 <p>Information published.</p> 1.0 2026-08-24T01:05:46 <p>Information published.</p> 5.0 2026-09-24T02:06:19 <p>Information published.</p> 6.0 2026-09-24T02:40:10 <p>Information published.</p> net: usb: ax88179_178a: fix skb leak in ax88179_tx_fixup() Mariner Linux Yes CVE-2026-74678 21684-17084 21684-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:11:47 <p>Information published.</p> 1.0 2026-08-24T01:01:58 <p>Information published.</p> 2.0 2026-08-24T14:46:29 <p>Information published.</p> 4.0 2026-09-25T02:26:24 <p>Information published.</p> 3.0 2026-09-11T01:53:55 <p>Information published.</p> usb: atm: cxacru: properly kill rcv_urb on error in cxacru_cm() Mariner Linux Yes CVE-2026-74680 21684-17084 21684-17084 Low 21684-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 2.0 2026-08-24T14:46:00 <p>Information published.</p> 1.0 2026-08-24T01:02:31 <p>Information published.</p> ALSA: usb-audio: fix OOB write on Type II inbound URBs Mariner Linux Yes CVE-2026-74682 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:07:20 <p>Information published.</p> 2.0 2026-08-24T14:52:00 <p>Information published.</p> 1.0 2026-08-24T01:09:18 <p>Information published.</p> 3.0 2026-09-11T01:51:40 <p>Information published.</p> 4.0 2026-09-25T02:13:21 <p>Information published.</p> Input: evdev - sanitize event type index when fetching event masks Mariner Linux Yes CVE-2026-74683 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:46:45 <p>Information published.</p> 1.0 2026-08-24T01:09:43 <p>Information published.</p> 4.0 2026-09-25T02:15:15 <p>Information published.</p> 2.0 2026-08-24T14:43:13 <p>Information published.</p> 3.0 2026-09-11T01:52:04 <p>Information published.</p> net: tap: set skb->dev before parsing virtio net header in tap_get_user_xdp() Mariner Linux Yes CVE-2026-74684 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-08-24T14:51:33 <p>Information published.</p> 4.0 2026-09-24T02:11:52 <p>Information published.</p> 5.0 2026-09-24T02:41:15 <p>Information published.</p> 1.0 2026-08-24T01:08:47 <p>Information published.</p> 3.0 2026-09-23T02:27:10 <p>Information published.</p> watchdog: at91sam9_wdt: prevent timer rearm during teardown Mariner Linux Yes CVE-2026-74687 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-24T01:09:05 <p>Information published.</p> 2.0 2026-08-24T14:51:49 <p>Information published.</p> sctp: clear control chunk transport if it is being removed Mariner Linux Yes CVE-2026-74688 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:48:18 <p>Information published.</p> 1.0 2026-08-24T01:07:01 <p>Information published.</p> 2.0 2026-08-24T14:50:05 <p>Information published.</p> 3.0 2026-09-11T01:49:44 <p>Information published.</p> 4.0 2026-09-25T02:05:00 <p>Information published.</p> net/atm: fix slab-out-of-bounds read in vcc_setsockopt() Mariner Linux Yes CVE-2026-74689 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:07:00 <p>Information published.</p> 3.0 2026-09-11T01:45:46 <p>Information published.</p> 4.0 2026-09-25T01:48:04 <p>Information published.</p> 1.0 2026-08-24T01:02:25 <p>Information published.</p> 2.0 2026-08-24T14:45:53 <p>Information published.</p> s390/ism: Fix UAF of sba and ieq during ism_dev_exit() Mariner Linux Yes CVE-2026-74690 21684-17084 21684-17084 Moderate 21684-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21684-17084 2.0 2026-08-24T14:44:42 <p>Information published.</p> 1.0 2026-08-24T01:11:13 <p>Information published.</p> net: thunderbolt: Tear down DMA paths before stopping the rings Mariner Linux Yes CVE-2026-74691 21684-17084 21684-17084 Moderate 21684-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-24T01:08:59 <p>Information published.</p> 2.0 2026-08-24T14:51:44 <p>Information published.</p> net/smc: fix TOCTOU race between smc_listen_out() and listener close Mariner Linux Yes CVE-2026-74692 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:11:41 <p>Information published.</p> 1.0 2026-08-24T01:02:51 <p>Information published.</p> 2.0 2026-08-24T14:46:18 <p>Information published.</p> 3.0 2026-09-11T01:46:06 <p>Information published.</p> 4.0 2026-09-25T01:49:30 <p>Information published.</p> net: prestera: validate firmware header length Mariner Linux Yes CVE-2026-74693 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 2.0 2026-08-24T14:48:01 <p>Information published.</p> 1.0 2026-08-24T01:04:40 <p>Information published.</p> net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length Mariner Linux Yes CVE-2026-74694 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:33:25 <p>Information published.</p> 3.0 2026-09-11T01:48:06 <p>Information published.</p> 1.0 2026-08-24T01:04:52 <p>Information published.</p> 2.0 2026-08-24T14:48:12 <p>Information published.</p> 4.0 2026-09-25T01:58:14 <p>Information published.</p> netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Mariner Linux Yes CVE-2026-74695 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-08-24T14:46:57 <p>Information published.</p> 5.0 2026-09-24T02:39:47 <p>Information published.</p> 1.0 2026-08-24T01:03:29 <p>Information published.</p> 3.0 2026-09-23T02:23:10 <p>Information published.</p> 4.0 2026-09-24T02:03:41 <p>Information published.</p> tcp: fix TFO max_qlen accounting across reuseport migration Mariner Linux Yes CVE-2026-74696 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:21:44 <p>Information published.</p> 2.0 2026-08-24T14:47:16 <p>Information published.</p> 3.0 2026-09-11T01:47:01 <p>Information published.</p> 4.0 2026-09-25T01:53:42 <p>Information published.</p> 1.0 2026-08-24T01:03:48 <p>Information published.</p> bnxt_en: Disable EOP for TPA on all chips to prevent data corruption Mariner Linux Yes CVE-2026-74697 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:18:46 <p>Information published.</p> 2.0 2026-08-24T14:47:03 <p>Information published.</p> 3.0 2026-09-11T01:46:43 <p>Information published.</p> 4.0 2026-09-25T01:52:41 <p>Information published.</p> 1.0 2026-08-24T01:03:35 <p>Information published.</p> net/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers Mariner Linux Yes CVE-2026-74700 21684-17084 21684-17084 Moderate 21684-17084 5.2 5.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:04:26 <p>Information published.</p> 2.0 2026-08-24T14:51:38 <p>Information published.</p> 4.0 2026-09-25T02:12:08 <p>Information published.</p> 1.0 2026-08-24T01:08:53 <p>Information published.</p> 3.0 2026-09-11T01:51:24 <p>Information published.</p> net/openvswitch: check Ethernet header length in key_extract() Mariner Linux Yes CVE-2026-74701 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:39:38 <p>Information published.</p> 2.0 2026-08-24T14:49:01 <p>Information published.</p> 3.0 2026-09-05T01:49:12 <p>Information published.</p> 4.0 2026-09-11T01:48:46 <p>Information published.</p> 1.0 2026-08-24T01:05:59 <p>Information published.</p> 5.0 2026-09-25T02:01:50 <p>Information published.</p> net/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter Mariner Linux Yes CVE-2026-74704 21684-17084 21684-17084 Important 21684-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:58:19 <p>Information published.</p> 2.0 2026-08-24T14:45:05 <p>Information published.</p> 3.0 2026-09-11T01:44:51 <p>Information published.</p> 1.0 2026-08-24T01:01:36 <p>Information published.</p> 4.0 2026-09-25T02:36:34 <p>Information published.</p> udp: fix potential use-after-free in tunnel segmentation Mariner Linux Yes CVE-2026-74705 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:45:19 <p>Information published.</p> 2.0 2026-08-24T14:49:32 <p>Information published.</p> 3.0 2026-09-05T02:20:14 <p>Information published.</p> 4.0 2026-09-11T01:49:26 <p>Information published.</p> 5.0 2026-09-25T02:03:55 <p>Information published.</p> 1.0 2026-08-24T01:06:30 <p>Information published.</p> hwmon: (pmbus) Fix type confusion in notification logic Mariner Linux Yes CVE-2026-74711 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Low 21892-17084 Low 21932-17084 Low 21684-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21892-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21932-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-08-24T14:45:38 <p>Information published.</p> 4.0 2026-09-24T02:18:00 <p>Information published.</p> 5.0 2026-09-24T02:43:26 <p>Information published.</p> 1.0 2026-08-24T01:12:08 <p>Information published.</p> 3.0 2026-09-23T02:33:55 <p>Information published.</p> vhost_iotlb: bound map allocation in add_range Mariner Linux Yes CVE-2026-74713 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-08-24T14:44:49 <p>Information published.</p> 3.0 2026-09-23T02:31:36 <p>Information published.</p> 4.0 2026-09-24T02:16:09 <p>Information published.</p> 5.0 2026-09-24T02:42:25 <p>Information published.</p> 1.0 2026-08-24T01:11:19 <p>Information published.</p> bpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch() Mariner Linux Yes CVE-2026-74714 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:04:19 <p>Information published.</p> 1.0 2026-08-24T01:02:12 <p>Information published.</p> 2.0 2026-08-24T14:45:38 <p>Information published.</p> 3.0 2026-09-11T01:45:28 <p>Information published.</p> 4.0 2026-09-25T01:46:47 <p>Information published.</p> bpf: Fix netns reference imbalance in conntrack kfuncs Mariner Linux Yes CVE-2026-74715 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21892-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21932-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-08-24T14:45:47 <p>Information published.</p> 3.0 2026-09-23T02:34:34 <p>Information published.</p> 4.0 2026-09-24T02:18:32 <p>Information published.</p> 5.0 2026-09-24T02:43:46 <p>Information published.</p> 1.0 2026-08-24T01:12:14 <p>Information published.</p> net/mlx5: fw_tracer, return NULL on create error Mariner Linux Yes CVE-2026-74717 21684-17084 21684-17084 Moderate 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:23:06 <p>Information published.</p> 1.0 2026-08-24T01:04:01 <p>Information published.</p> 4.0 2026-09-25T01:54:13 <p>Information published.</p> 2.0 2026-08-24T14:47:27 <p>Information published.</p> 3.0 2026-09-11T01:47:11 <p>Information published.</p> devlink: fix net namespace reference leak in reload Mariner Linux Yes CVE-2026-74718 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T02:01:33 <p>Information published.</p> 2.0 2026-08-24T14:45:07 <p>Information published.</p> 3.0 2026-09-11T01:53:08 <p>Information published.</p> 4.0 2026-09-25T02:21:34 <p>Information published.</p> 1.0 2026-08-24T01:11:37 <p>Information published.</p> net/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler() Mariner Linux Yes CVE-2026-74719 21684-17084 21684-17084 Low 21684-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 6.0 2026-10-02T03:43:50 <p>Information published.</p> 3.0 2026-09-05T01:59:08 <p>Information published.</p> 5.0 2026-09-25T02:03:21 <p>Information published.</p> 1.0 2026-08-24T01:06:24 <p>Information published.</p> 2.0 2026-08-24T14:49:25 <p>Information published.</p> 4.0 2026-09-11T01:49:16 <p>Information published.</p> bpf: Preserve pointer state for commuted arithmetic Mariner Linux Yes CVE-2026-74720 21684-17084 21684-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:52:38 <p>Information published.</p> 2.0 2026-08-24T14:50:28 <p>Information published.</p> 1.0 2026-08-24T01:07:33 <p>Information published.</p> 3.0 2026-09-11T01:50:12 <p>Information published.</p> 4.0 2026-09-25T02:07:36 <p>Information published.</p> btrfs: fix memory leak in btrfs_do_encoded_write() Mariner Linux Yes CVE-2026-74722 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:55:25 <p>Information published.</p> 2.0 2026-08-24T14:43:56 <p>Information published.</p> 3.0 2026-09-11T01:52:44 <p>Information published.</p> 1.0 2026-08-24T01:10:28 <p>Information published.</p> 4.0 2026-09-25T02:17:52 <p>Information published.</p> btrfs: lzo: reject inline extents without valid headers Mariner Linux Yes CVE-2026-74723 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 21932-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 21684-17084 5.1 5.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-08-24T14:44:32 <p>Information published.</p> 1.0 2026-08-24T01:11:06 <p>Information published.</p> 3.0 2026-09-23T02:31:09 <p>Information published.</p> 4.0 2026-09-24T02:15:39 <p>Information published.</p> 5.0 2026-09-24T02:42:02 <p>Information published.</p> ipvs: avoid out-of-bounds write in ip_vs_nat_icmp Mariner Linux Yes CVE-2026-74724 21684-17084 21684-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T03:46:47 <p>Information published.</p> 2.0 2026-08-24T14:49:59 <p>Information published.</p> 3.0 2026-09-11T01:49:35 <p>Information published.</p> 4.0 2026-09-25T02:04:37 <p>Information published.</p> 1.0 2026-08-24T01:06:55 <p>Information published.</p> enic: fix tx_hang_reset use-after-free on device removal Mariner Linux Yes CVE-2026-74725 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-23T02:30:25 <p>Information published.</p> 4.0 2026-09-24T02:13:44 <p>Information published.</p> 1.0 2026-08-24T01:11:00 <p>Information published.</p> 2.0 2026-08-24T14:44:27 <p>Information published.</p> 5.0 2026-09-24T02:41:36 <p>Information published.</p> bonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor Mariner Linux Yes CVE-2026-74726 21684-17084 21684-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:45:14 <p>Information published.</p> 2.0 2026-08-24T14:43:06 <p>Information published.</p> 4.0 2026-09-25T02:14:37 <p>Information published.</p> 1.0 2026-08-24T01:09:37 <p>Information published.</p> 3.0 2026-09-11T01:51:56 <p>Information published.</p> NFS: Pin the 'struct nfs_server' during a FREE_STATEID call Mariner Linux Yes CVE-2026-74730 21684-17084 21684-17084 Moderate 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T01:49:46 <p>Information published.</p> 1.0 2026-08-24T01:09:56 <p>Information published.</p> 2.0 2026-08-24T14:43:25 <p>Information published.</p> 4.0 2026-09-25T02:16:08 <p>Information published.</p> 3.0 2026-09-11T01:52:12 <p>Information published.</p> drm/amd/display: Check for tg ops in dce110_set_avmute Mariner Linux Yes CVE-2026-74732 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-08-24T14:50:10 <p>Information published.</p> 3.0 2026-09-23T02:26:19 <p>Information published.</p> 4.0 2026-09-24T02:10:19 <p>Information published.</p> 1.0 2026-08-24T01:07:07 <p>Information published.</p> 5.0 2026-09-24T02:40:54 <p>Information published.</p> 6.0 2026-10-24T14:44:41 <p>Information published.</p> gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Mariner Linux Yes CVE-2026-74733 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 21684-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 21892-17084 3.0 3.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:L 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-08-24T14:45:20 <p>Information published.</p> 3.0 2026-09-23T02:32:34 <p>Information published.</p> 5.0 2026-09-24T02:42:46 <p>Information published.</p> 1.0 2026-08-24T01:11:50 <p>Information published.</p> 4.0 2026-09-24T02:17:02 <p>Information published.</p> 6.0 2026-10-24T14:44:45 <p>Information published.</p> firewire: ohci: fix NULL pointer dereference in ar_context_release Mariner Linux Yes CVE-2026-74734 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-27T01:08:52 <p>Information published.</p> 2.0 2026-09-23T02:09:20 <p>Information published.</p> 4.0 2026-09-24T14:41:38 <p>Information published.</p> 3.0 2026-09-24T01:31:27 <p>Information published.</p> net/sched: cls_bpf: reject dev-bound programs bound to a different device Mariner Linux Yes CVE-2026-74736 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:56:19 <p>Information published.</p> 1.0 2026-08-27T01:06:26 <p>Information published.</p> 2.0 2026-09-23T01:53:00 <p>Information published.</p> 3.0 2026-09-23T15:47:53 <p>Information published.</p> 4.0 2026-09-24T01:17:35 <p>Information published.</p> net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG Mariner Linux Yes CVE-2026-74737 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.3 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:09:57 <p>Information published.</p> 3.0 2026-09-23T15:50:43 <p>Information published.</p> 4.0 2026-09-24T01:23:52 <p>Information published.</p> 1.0 2026-08-27T01:07:29 <p>Information published.</p> 2.0 2026-09-23T01:59:41 <p>Information published.</p> net/sched: cls_u32: skip hash tables in u32_bind_class() Mariner Linux Yes CVE-2026-74739 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:45:53 <p>Information published.</p> 1.0 2026-08-27T01:05:18 <p>Information published.</p> 2.0 2026-09-23T02:54:32 <p>Information published.</p> 3.0 2026-09-23T15:44:30 <p>Information published.</p> 4.0 2026-09-24T01:11:51 <p>Information published.</p> net/sched: act_api: fix TOCTOU NULL deref on a->goto_chain Mariner Linux Yes CVE-2026-74740 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:47:25 <p>Information published.</p> 1.0 2026-08-27T01:05:31 <p>Information published.</p> 2.0 2026-09-23T01:44:55 <p>Information published.</p> 3.0 2026-09-23T15:45:50 <p>Information published.</p> 4.0 2026-09-24T01:13:03 <p>Information published.</p> macvlan: inherit needed_headroom and needed_tailroom from lowerdev Mariner Linux Yes CVE-2026-74743 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:03:32 <p>Information published.</p> 1.0 2026-08-27T01:06:58 <p>Information published.</p> 3.0 2026-09-23T15:49:23 <p>Information published.</p> 2.0 2026-09-23T01:56:42 <p>Information published.</p> 4.0 2026-09-24T01:20:43 <p>Information published.</p> ipvlan: inherit needed_headroom and needed_tailroom from phy_dev Mariner Linux Yes CVE-2026-74744 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:11:20 <p>Information published.</p> 2.0 2026-09-23T02:00:23 <p>Information published.</p> 1.0 2026-08-27T01:07:35 <p>Information published.</p> 3.0 2026-09-23T15:50:56 <p>Information published.</p> 4.0 2026-09-24T01:24:25 <p>Information published.</p> netfilter: flowtable: publish GC-visible tuple last Mariner Linux Yes CVE-2026-74746 21684-17084 21892-17084 21684-17084 21892-17084 Important 21684-17084 Important 21892-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:18:41 <p>Information published.</p> 1.0 2026-08-27T01:08:22 <p>Information published.</p> 2.0 2026-09-23T02:06:14 <p>Information published.</p> 3.0 2026-09-23T14:49:53 <p>Information published.</p> 4.0 2026-09-24T01:28:55 <p>Information published.</p> ipvs: revalidate ihl to prevent out-of-bounds access Mariner Linux Yes CVE-2026-74747 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-09-23T02:07:55 <p>Information published.</p> 4.0 2026-09-24T02:47:02 <p>Information published.</p> 1.0 2026-08-27T01:08:43 <p>Information published.</p> 3.0 2026-09-24T01:30:50 <p>Information published.</p> netfilter: ipset: fix refcount race between list:set GC and swap Mariner Linux Yes CVE-2026-74748 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:43:03 <p>Information published.</p> 1.0 2026-08-27T01:05:06 <p>Information published.</p> 2.0 2026-09-23T02:53:24 <p>Information published.</p> 3.0 2026-09-23T15:43:50 <p>Information published.</p> 4.0 2026-09-24T01:10:34 <p>Information published.</p> sctp: validate cookie AUTH state before use Mariner Linux Yes CVE-2026-74752 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Important 21892-17084 Important 21684-17084 Important 21932-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T01:50:29 <p>Information published.</p> 1.0 2026-08-27T01:06:02 <p>Information published.</p> 3.0 2026-09-24T01:16:17 <p>Information published.</p> 4.0 2026-09-24T02:45:48 <p>Information published.</p> perf: Reject exited events as group leaders Mariner Linux Yes CVE-2026-74753 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:02:02 <p>Information published.</p> 2.0 2026-09-23T01:55:44 <p>Information published.</p> 3.0 2026-09-23T15:49:07 <p>Information published.</p> 1.0 2026-08-27T01:06:51 <p>Information published.</p> 4.0 2026-09-24T01:20:03 <p>Information published.</p> scsi: core: pair EH runtime PM get and put Mariner Linux Yes CVE-2026-74754 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Low 21932-17084 Low 21684-17084 Low 21892-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-27T01:07:17 <p>Information published.</p> 2.0 2026-09-23T01:58:41 <p>Information published.</p> 3.0 2026-09-24T01:22:30 <p>Information published.</p> 4.0 2026-09-24T02:46:06 <p>Information published.</p> Bluez: bluez: out-of-bounds read in avrcp parse_media_element and parse_media_folder Mariner redhat Yes CVE-2026-75032 Out-of-bounds Read 18232-17084 21808-17084 18232-17084 21808-17084 Moderate 18232-17084 Moderate 21808-17084 6.3 5.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U 18232-17084 6.3 5.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U 21808-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21808-17084 Security Update 5.63-7 21808-17084 1.0 2026-08-21T14:02:40 <p>Information published.</p> 3.0 2026-09-13T01:48:52 <p>Information published.</p> 2.0 2026-09-09T15:04:39 <p>Information published.</p> BuildKit: Malicious client can bypass destination directory validation on local sources upload Mariner GitHub_M Yes CVE-2026-75593 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21691-17084 21807-17084 21691-17084 21807-17084 Important 21691-17084 Important 21807-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21691-17084 21807-17084 Security Update 25.0.3-20 21691-17084 21807-17084 1.0 2026-08-23T01:04:23 <p>Information published.</p> 2.0 2026-08-24T14:44:47 <p>Information published.</p> 3.0 2026-09-08T01:52:22 <p>Information published.</p> 4.0 2026-09-09T14:44:27 <p>Information published.</p> 5.0 2026-09-10T03:34:56 <p>Information published.</p> Swtpm: swtpm: out-of-bounds read in swtpm_nvram_checkheader due to sizeof(pointer) vs sizeof(struct) mismatch Mariner redhat Yes CVE-2026-75900 Out-of-bounds Read 21738-17084 21860-17084 21738-17084 21860-17084 Moderate 21738-17084 Moderate 21860-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U 21738-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U 21860-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21860-17084 Security Update 0.8.1-6 21860-17084 1.0 2026-08-21T14:03:19 <p>Information published.</p> 2.0 2026-09-09T15:05:16 <p>Information published.</p> 3.0 2026-09-13T01:49:09 <p>Information published.</p> Mistune has Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown Mariner GitHub_M Yes CVE-2026-76098 Uncontrolled Recursion 21576-17084 21576-17084 Moderate 21576-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21576-17084 1.0 2026-08-27T01:13:41 <p>Information published.</p> zlib 1.2.11 through 1.3.2 Heap Buffer Overflow via Stale gzwrite Pointer After Failed Write Mariner VulnCheck Yes CVE-2026-76844 Out-of-bounds Write 21222-17084 21222-17084 Moderate 21222-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H 21222-17084 Release Notes 21222-17084 Security Update 1.3.2-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21222-17084 Release Notes 1.0 2026-10-02T01:02:06 <p>Information published.</p> 2.0 2026-10-17T01:43:23 <p>Information published.</p> In libexpat 2.8.2 and 2.8.3 before 2.8.4, misinterpretation of getentropy's return code leads to insufficient entropy, which results in being vulnerable to hash flooding attacks, causing a denial of service via crafted XML content. Mariner mitre Yes CVE-2026-76956 Unexpected Status Code or Return Value 21698-17084 21698-17084 Moderate 21698-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21698-17084 1.0 2026-08-21T14:02:21 <p>Information published.</p> libexpat before 2.8.4 lacks handler call depth tracking with custom encoding callbacks. Thus, a use-after-free can occur. NOTE: this is similar to CVE-2026-50219, CVE-2026-56131 and CVE-2026-56412. Mariner mitre Yes CVE-2026-76957 Use After Free 21698-17084 21708-17084 21694-17084 21698-17084 21708-17084 21694-17084 Moderate 21698-17084 Moderate 21708-17084 Moderate 21694-17084 4.9 4.5 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U 21698-17084 4.9 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 21708-17084 4.9 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 21694-17084 1.0 2026-08-21T14:02:28 <p>Information published.</p> 2.0 2026-08-23T01:03:45 <p>Information published.</p> 3.0 2026-08-24T01:44:07 <p>Information published.</p> Libsoup: libsoup: integer truncation in sort_ranges() comparator causes silent omission of http range responses Mariner redhat Yes CVE-2026-77014 Numeric Truncation Error 21478-17084 21895-17084 21478-17084 21895-17084 Moderate 21478-17084 Moderate 21895-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21478-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U 21895-17084 Release Notes 21478-17084 Security Update 3.4.4-17 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21478-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21895-17084 Security Update 3.4.4-17 21895-17084 2.0 2026-09-07T01:49:12 <p>Information published.</p> 4.0 2026-09-23T02:37:04 <p>Information published.</p> 5.0 2026-09-24T02:44:22 <p>Information published.</p> 1.0 2026-08-25T01:06:41 <p>Information published.</p> 3.0 2026-09-16T14:48:22 <p>Information published.</p> 6.0 2026-10-13T02:57:47 <p>Information published.</p> Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy Mariner redhat Yes CVE-2026-77176 External Control of File Name or Path 21655-17084 21813-17084 21655-17084 21813-17084 Important 21655-17084 Important 21813-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U 21655-17084 8.1 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U 21813-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21655-17084 21813-17084 Security Update 3.32.0.kata0-5 21655-17084 21813-17084 3.0 2026-09-09T14:45:14 <p>Information published.</p> 4.0 2026-09-13T01:49:39 <p>Information published.</p> 1.0 2026-08-25T01:06:34 <p>Information published.</p> 2.0 2026-09-08T14:45:31 <p>Information published.</p> GNU Emacs < 31.0.91 Heap Over-Read via PBM/PPM/PGM Image Loader Mariner VulnCheck Yes CVE-2026-77219 Integer Overflow or Wraparound 21314-17084 21861-17084 21314-17084 21861-17084 Moderate 21314-17084 Moderate 21861-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 21314-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H 21861-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21861-17084 Security Update 29.4-6 21861-17084 1.0 2026-08-23T01:02:54 <p>Information published.</p> 2.0 2026-08-24T14:43:37 <p>Information published.</p> 4.0 2026-09-13T01:49:18 <p>Information published.</p> 3.0 2026-09-09T15:05:28 <p>Information published.</p> Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function Mariner redhat Yes CVE-2026-78002 Incorrect Calculation of Buffer Size 21037-17084 21917-17084 21838-17084 21037-17084 21917-17084 21838-17084 Moderate 21037-17084 Moderate 21917-17084 Moderate 21838-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21037-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21917-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21838-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21037-17084 Security Update 21037-17084 Release Notes 21917-17084 Security Update 8.2308.0-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21917-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21838-17084 Security Update 8.2308.0-7 21838-17084 7.0 2026-10-02T01:47:13 <p>Information published.</p> 2.0 2026-09-07T01:54:34 <p>Information published.</p> 3.0 2026-09-09T14:49:49 <p>Information published.</p> 5.0 2026-09-23T02:38:19 <p>Information published.</p> 6.0 2026-09-25T02:35:14 <p>Information published.</p> 1.0 2026-09-02T01:05:13 <p>Information published.</p> 4.0 2026-09-11T01:59:16 <p>Information published.</p> Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write Mariner redhat Yes CVE-2026-79655 Improper Link Resolution Before File Access ('Link Following') 21764-17084 21764-17084 Important 21764-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21764-17084 Release Notes 21764-17084 Security Update 4.6.1-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21764-17084 Release Notes 1.0 2026-08-29T01:08:51 <p>Information published.</p> 2.0 2026-09-05T01:59:45 <p>Information published.</p> 3.0 2026-09-25T02:27:57 <p>Information published.</p> 5.0 2026-10-07T01:57:28 <p>Information published.</p> 4.0 2026-10-05T14:43:36 <p>Information published.</p> Emacs: local shell command injection through the user field in emacs tramp Mariner redhat Yes CVE-2026-79992 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 21314-17084 21314-17084 Important 21314-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21314-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21314-17084 Security Update 29.4-5 21314-17084 2.0 2026-09-05T01:47:48 <p>Information published.</p> 1.0 2026-08-29T01:08:11 <p>Information published.</p> af_unix: Unlink scc_entry in unix_del_edge(). Mariner Linux Yes CVE-2026-80521 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 Moderate 21892-17084 Moderate 21932-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 6.0 2026-10-15T01:50:30 <p>Information published.</p> 2.0 2026-09-23T02:05:32 <p>Information published.</p> 3.0 2026-09-24T01:27:28 <p>Information published.</p> 4.0 2026-09-24T02:46:44 <p>Information published.</p> 1.0 2026-08-27T01:08:06 <p>Information published.</p> 5.0 2026-10-13T17:14:22 <p>Information published.</p> ASoC: tas2562: Validate values for volume writes Mariner Linux Yes CVE-2026-80526 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:08:30 <p>Information published.</p> 1.0 2026-08-27T01:07:23 <p>Information published.</p> 2.0 2026-09-23T01:59:16 <p>Information published.</p> 3.0 2026-09-23T15:50:28 <p>Information published.</p> 4.0 2026-09-24T01:23:14 <p>Information published.</p> ceph: fix hanging __ceph_get_caps() with stale mds_wanted Mariner Linux Yes CVE-2026-80527 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:17:49 <p>Information published.</p> 3.0 2026-09-23T15:36:04 <p>Information published.</p> 1.0 2026-08-27T01:03:01 <p>Information published.</p> 2.0 2026-09-23T02:37:46 <p>Information published.</p> 4.0 2026-09-24T02:21:23 <p>Information published.</p> ceph: avoid fs reclaim while using current->journal_info Mariner Linux Yes CVE-2026-80528 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:23:36 <p>Information published.</p> 1.0 2026-08-27T01:03:28 <p>Information published.</p> 2.0 2026-09-05T01:57:47 <p>Information published.</p> 3.0 2026-09-23T02:39:41 <p>Information published.</p> 4.0 2026-09-23T15:37:35 <p>Information published.</p> 5.0 2026-09-24T02:23:44 <p>Information published.</p> xfs: don't swallow dquot recovery verification errors Mariner Linux Yes CVE-2026-80529 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21684-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:15:42 <p>Information published.</p> 1.0 2026-08-27T01:08:00 <p>Information published.</p> 2.0 2026-09-23T02:04:23 <p>Information published.</p> 3.0 2026-09-23T14:48:02 <p>Information published.</p> 4.0 2026-09-24T01:26:43 <p>Information published.</p> xfs: fix ilock leak on error in xfs_dq_get_next_id Mariner Linux Yes CVE-2026-80534 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 6.0 2026-10-02T02:20:36 <p>Information published.</p> 1.0 2026-08-27T01:03:13 <p>Information published.</p> 2.0 2026-09-05T01:46:50 <p>Information published.</p> 4.0 2026-09-23T15:36:52 <p>Information published.</p> 5.0 2026-09-24T02:22:32 <p>Information published.</p> 3.0 2026-09-23T02:38:47 <p>Information published.</p> xfs: bounds-check buffer log item's dirty bitmap Mariner Linux Yes CVE-2026-80536 21684-17084 21892-17084 21684-17084 21892-17084 Important 21684-17084 Important 21892-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21684-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:29:06 <p>Information published.</p> 3.0 2026-09-23T14:58:59 <p>Information published.</p> 1.0 2026-08-27T01:09:36 <p>Information published.</p> 2.0 2026-09-23T02:12:46 <p>Information published.</p> 4.0 2026-09-24T01:34:52 <p>Information published.</p> drm/amdgpu: disallow multiple FENCE chunks in one submit Mariner Linux Yes CVE-2026-80539 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:48:53 <p>Information published.</p> 3.0 2026-09-23T15:46:09 <p>Information published.</p> 1.0 2026-08-27T01:05:37 <p>Information published.</p> 2.0 2026-09-23T01:46:48 <p>Information published.</p> 4.0 2026-09-24T01:13:41 <p>Information published.</p> drm/amdgpu: Fix UVD decode image min size calculation Mariner Linux Yes CVE-2026-80540 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:40:09 <p>Information published.</p> 3.0 2026-09-23T15:43:00 <p>Information published.</p> 4.0 2026-09-24T01:09:31 <p>Information published.</p> 1.0 2026-08-27T01:04:52 <p>Information published.</p> 2.0 2026-09-23T02:52:40 <p>Information published.</p> drm/amdgpu: validate GEM_CREATE domain combinations Mariner Linux Yes CVE-2026-80541 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:50:27 <p>Information published.</p> 1.0 2026-08-27T01:05:44 <p>Information published.</p> 2.0 2026-09-23T01:47:21 <p>Information published.</p> 3.0 2026-09-23T15:46:28 <p>Information published.</p> 4.0 2026-09-24T01:14:27 <p>Information published.</p> s390/vfio_ccw: Implement a crw lock Mariner Linux Yes CVE-2026-80547 21892-17084 21684-17084 21892-17084 21684-17084 Low 21892-17084 Low 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:44:30 <p>Information published.</p> 1.0 2026-08-27T01:05:12 <p>Information published.</p> 2.0 2026-09-23T02:54:16 <p>Information published.</p> 3.0 2026-09-23T15:44:12 <p>Information published.</p> 4.0 2026-09-24T01:11:16 <p>Information published.</p> s390/vfio_ccw: Move cp cleanup out of not operational Mariner Linux Yes CVE-2026-80549 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:51:58 <p>Information published.</p> 1.0 2026-08-27T01:05:50 <p>Information published.</p> 2.0 2026-09-23T01:47:55 <p>Information published.</p> 3.0 2026-09-23T15:46:44 <p>Information published.</p> 4.0 2026-09-24T01:14:59 <p>Information published.</p> s390/vfio_ccw: Fix out of bounds check on CCW array Mariner Linux Yes CVE-2026-80550 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:34:01 <p>Information published.</p> 3.0 2026-09-23T02:47:51 <p>Information published.</p> 1.0 2026-08-27T01:04:21 <p>Information published.</p> 2.0 2026-09-05T02:10:09 <p>Information published.</p> 4.0 2026-09-23T15:40:33 <p>Information published.</p> 5.0 2026-09-24T01:06:16 <p>Information published.</p> s390/vfio_ccw: Ensure first IDAW remains constant Mariner Linux Yes CVE-2026-80551 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:20:03 <p>Information published.</p> 2.0 2026-09-23T02:06:37 <p>Information published.</p> 1.0 2026-08-27T01:08:29 <p>Information published.</p> 3.0 2026-09-23T14:50:33 <p>Information published.</p> 4.0 2026-09-24T01:29:32 <p>Information published.</p> s390/vfio_ccw: Ensure index for read/write regions are within range Mariner Linux Yes CVE-2026-80552 21892-17084 21684-17084 21892-17084 21684-17084 Important 21892-17084 Important 21684-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:21:28 <p>Information published.</p> 2.0 2026-09-23T02:07:28 <p>Information published.</p> 1.0 2026-08-27T01:08:35 <p>Information published.</p> 3.0 2026-09-23T14:51:11 <p>Information published.</p> 4.0 2026-09-24T01:30:13 <p>Information published.</p> s390/vfio_ccw: Cancel existing workqueues Mariner Linux Yes CVE-2026-80553 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.1 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:27:35 <p>Information published.</p> 1.0 2026-08-27T01:09:29 <p>Information published.</p> 2.0 2026-09-23T02:11:57 <p>Information published.</p> 3.0 2026-09-23T14:58:33 <p>Information published.</p> 4.0 2026-09-24T01:34:14 <p>Information published.</p> s390/vfio_ccw: Limit the number of channel program segments Mariner Linux Yes CVE-2026-80554 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:59:14 <p>Information published.</p> 1.0 2026-08-27T01:06:39 <p>Information published.</p> 2.0 2026-09-23T01:53:49 <p>Information published.</p> 3.0 2026-09-23T15:48:30 <p>Information published.</p> 4.0 2026-09-24T01:18:51 <p>Information published.</p> mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition Mariner Linux Yes CVE-2026-80556 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-27T01:03:56 <p>Information published.</p> 2.0 2026-09-05T01:49:18 <p>Information published.</p> 4.0 2026-09-24T01:03:50 <p>Information published.</p> 3.0 2026-09-23T02:44:51 <p>Information published.</p> 5.0 2026-09-24T02:44:43 <p>Information published.</p> libceph: Avoid using invalid osd indices from primary_temp Mariner Linux Yes CVE-2026-80558 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:37:02 <p>Information published.</p> 4.0 2026-09-24T01:08:13 <p>Information published.</p> 1.0 2026-08-27T01:04:40 <p>Information published.</p> 2.0 2026-09-23T02:50:58 <p>Information published.</p> 3.0 2026-09-23T15:42:11 <p>Information published.</p> Input: sur40 - fix input device registration ordering Mariner Linux Yes CVE-2026-80559 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:23:05 <p>Information published.</p> 1.0 2026-08-27T01:09:01 <p>Information published.</p> 2.0 2026-09-23T02:09:53 <p>Information published.</p> 4.0 2026-09-24T01:31:57 <p>Information published.</p> 3.0 2026-09-23T14:54:51 <p>Information published.</p> openrisc: signal: do not restore privileged SR bits on sigreturn Mariner Linux Yes CVE-2026-80560 21684-17084 21892-17084 21684-17084 21892-17084 Important 21684-17084 Important 21892-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:06:59 <p>Information published.</p> 2.0 2026-09-23T01:58:00 <p>Information published.</p> 1.0 2026-08-27T01:07:10 <p>Information published.</p> 3.0 2026-09-23T15:49:54 <p>Information published.</p> 4.0 2026-09-24T01:21:50 <p>Information published.</p> libceph: fix multiple unsafe decodes in decode_locker() Mariner Linux Yes CVE-2026-80561 21684-17084 21892-17084 21684-17084 21892-17084 Important 21684-17084 Important 21892-17084 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 21684-17084 7.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:04:55 <p>Information published.</p> 2.0 2026-09-23T01:57:05 <p>Information published.</p> 1.0 2026-08-27T01:07:04 <p>Information published.</p> 3.0 2026-09-23T15:49:38 <p>Information published.</p> 4.0 2026-09-24T01:21:19 <p>Information published.</p> gpio: ml-ioh: use raw_spinlock_t for the register lock Mariner Linux Yes CVE-2026-80562 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:41:34 <p>Information published.</p> 1.0 2026-08-27T01:04:58 <p>Information published.</p> 4.0 2026-09-24T01:10:03 <p>Information published.</p> 2.0 2026-09-23T02:53:00 <p>Information published.</p> 3.0 2026-09-23T15:43:23 <p>Information published.</p> crypto: qce - fix error path in devm_qce_register_algs Mariner Linux Yes CVE-2026-80565 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21684-17084 1.9 1.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:27:50 <p>Information published.</p> 3.0 2026-09-23T02:43:44 <p>Information published.</p> 4.0 2026-09-23T15:38:50 <p>Information published.</p> 5.0 2026-09-24T01:03:12 <p>Information published.</p> 1.0 2026-08-27T01:03:50 <p>Information published.</p> 2.0 2026-09-05T02:29:19 <p>Information published.</p> Input: hynitron_cstxxx - validate touch count and finger IDs Mariner Linux Yes CVE-2026-80566 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 21684-17084 3.5 3.5 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:32:29 <p>Information published.</p> 4.0 2026-09-23T15:40:09 <p>Information published.</p> 5.0 2026-09-24T01:05:37 <p>Information published.</p> 1.0 2026-08-27T01:04:15 <p>Information published.</p> 2.0 2026-09-05T02:20:03 <p>Information published.</p> 3.0 2026-09-23T02:46:58 <p>Information published.</p> Input: synaptics-rmi4 - propagate F54 worker errors to V4L2 queue Mariner Linux Yes CVE-2026-80567 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 21892-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:14:10 <p>Information published.</p> 3.0 2026-09-23T14:45:30 <p>Information published.</p> 1.0 2026-08-27T01:07:48 <p>Information published.</p> 2.0 2026-09-23T02:01:50 <p>Information published.</p> 4.0 2026-09-24T01:25:33 <p>Information published.</p> Input: synaptics-rmi4 - block s_input when F54 queue is busy Mariner Linux Yes CVE-2026-80568 21892-17084 21684-17084 21892-17084 21684-17084 Important 21892-17084 Important 21684-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21892-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 6.0 2026-10-02T02:22:02 <p>Information published.</p> 1.0 2026-08-27T01:03:20 <p>Information published.</p> 4.0 2026-09-23T15:37:15 <p>Information published.</p> 5.0 2026-09-24T02:23:10 <p>Information published.</p> 2.0 2026-09-05T01:47:29 <p>Information published.</p> 3.0 2026-09-23T02:39:21 <p>Information published.</p> Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer Mariner Linux Yes CVE-2026-80569 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:12:45 <p>Information published.</p> 1.0 2026-08-27T01:07:41 <p>Information published.</p> 2.0 2026-09-23T02:00:56 <p>Information published.</p> 3.0 2026-09-23T15:51:11 <p>Information published.</p> 4.0 2026-09-24T01:25:00 <p>Information published.</p> Input: synaptics-rmi4 - zero report size on F54 work error Mariner Linux Yes CVE-2026-80570 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:29:22 <p>Information published.</p> 2.0 2026-09-05T01:58:56 <p>Information published.</p> 1.0 2026-08-27T01:04:02 <p>Information published.</p> 3.0 2026-09-23T02:45:53 <p>Information published.</p> 4.0 2026-09-23T15:39:28 <p>Information published.</p> 5.0 2026-09-24T01:04:23 <p>Information published.</p> Input: byd - synchronize timer deletion before freeing private data Mariner Linux Yes CVE-2026-80572 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:57:47 <p>Information published.</p> 1.0 2026-08-27T01:06:33 <p>Information published.</p> 2.0 2026-09-23T01:53:20 <p>Information published.</p> 3.0 2026-09-23T15:48:10 <p>Information published.</p> 4.0 2026-09-24T01:18:14 <p>Information published.</p> Input: iforce - validate input packet lengths Mariner Linux Yes CVE-2026-80573 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:30:54 <p>Information published.</p> 2.0 2026-09-05T01:59:16 <p>Information published.</p> 5.0 2026-09-24T01:04:59 <p>Information published.</p> 1.0 2026-08-27T01:04:08 <p>Information published.</p> 3.0 2026-09-23T02:46:09 <p>Information published.</p> 4.0 2026-09-23T15:39:50 <p>Information published.</p> Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet Mariner Linux Yes CVE-2026-80574 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.3 4.3 CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:24:34 <p>Information published.</p> 1.0 2026-08-27T01:09:09 <p>Information published.</p> 2.0 2026-09-23T02:10:25 <p>Information published.</p> 3.0 2026-09-23T14:55:28 <p>Information published.</p> 4.0 2026-09-24T01:32:25 <p>Information published.</p> drm/amdgpu: reject oversized IBs with per-ring packet limits Mariner Linux Yes CVE-2026-80576 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21892-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21684-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-27T01:09:23 <p>Information published.</p> 2.0 2026-09-23T02:11:30 <p>Information published.</p> 3.0 2026-09-24T01:33:39 <p>Information published.</p> 4.0 2026-09-24T01:49:27 <p>Information published.</p> fbdev: core: Fix pointer desynchronization in fb_io_read() Mariner Linux Yes CVE-2026-80578 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:35:31 <p>Information published.</p> 3.0 2026-09-23T15:41:49 <p>Information published.</p> 4.0 2026-09-24T01:07:37 <p>Information published.</p> 1.0 2026-08-27T01:04:33 <p>Information published.</p> 2.0 2026-09-23T02:49:33 <p>Information published.</p> fbdev: clear fb_info->mode before deleting a videomode Mariner Linux Yes CVE-2026-80579 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 3.0 2026-09-23T02:48:43 <p>Information published.</p> 4.0 2026-09-24T01:07:07 <p>Information published.</p> 5.0 2026-09-24T02:45:06 <p>Information published.</p> 1.0 2026-08-27T01:04:27 <p>Information published.</p> 2.0 2026-09-05T02:00:02 <p>Information published.</p> fbdev: bound mode sysfs output to the sysfs buffer Mariner Linux Yes CVE-2026-80580 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T01:26:06 <p>Information published.</p> 1.0 2026-08-27T01:07:54 <p>Information published.</p> 2.0 2026-09-23T02:04:00 <p>Information published.</p> 4.0 2026-09-24T02:46:26 <p>Information published.</p> ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Mariner Linux Yes CVE-2026-80581 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T02:38:34 <p>Information published.</p> 1.0 2026-08-27T01:04:46 <p>Information published.</p> 2.0 2026-09-23T02:51:33 <p>Information published.</p> 3.0 2026-09-23T15:42:33 <p>Information published.</p> 4.0 2026-09-24T01:08:50 <p>Information published.</p> ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses Mariner Linux Yes CVE-2026-80583 21892-17084 21684-17084 21892-17084 21684-17084 Low 21892-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 6.0 2026-10-02T02:19:10 <p>Information published.</p> 1.0 2026-08-27T01:03:07 <p>Information published.</p> 2.0 2026-09-05T01:56:59 <p>Information published.</p> 3.0 2026-09-23T02:38:08 <p>Information published.</p> 4.0 2026-09-23T15:36:30 <p>Information published.</p> 5.0 2026-09-24T02:21:57 <p>Information published.</p> s390/qeth: validate user buffer length in SNMP and ARP query ioctls Mariner Linux Yes CVE-2026-80584 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:25:03 <p>Information published.</p> 3.0 2026-09-23T02:40:51 <p>Information published.</p> 5.0 2026-09-24T02:24:17 <p>Information published.</p> 1.0 2026-08-27T01:03:37 <p>Information published.</p> 2.0 2026-09-05T01:48:11 <p>Information published.</p> 4.0 2026-09-23T15:37:58 <p>Information published.</p> mptcp: fastopen: only mark MPTFO subflows with SYN data Mariner Linux Yes CVE-2026-80585 21684-17084 21892-17084 21684-17084 21892-17084 Low 21684-17084 Low 21892-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:26:04 <p>Information published.</p> 2.0 2026-09-23T02:11:00 <p>Information published.</p> 3.0 2026-09-23T14:56:04 <p>Information published.</p> 1.0 2026-08-27T01:09:17 <p>Information published.</p> 4.0 2026-09-24T01:33:00 <p>Information published.</p> mptcp: options: reset DSS fields in case of unexpected size Mariner Linux Yes CVE-2026-80586 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:00:32 <p>Information published.</p> 2.0 2026-09-23T01:55:24 <p>Information published.</p> 3.0 2026-09-23T15:48:47 <p>Information published.</p> 1.0 2026-08-27T01:06:45 <p>Information published.</p> 4.0 2026-09-24T01:19:23 <p>Information published.</p> mptcp: avoid combining some incoming suboptions Mariner Linux Yes CVE-2026-80587 21892-17084 21684-17084 21892-17084 21684-17084 Moderate 21892-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21892-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:17:11 <p>Information published.</p> 2.0 2026-09-23T02:05:52 <p>Information published.</p> 4.0 2026-09-24T01:28:13 <p>Information published.</p> 1.0 2026-08-27T01:08:15 <p>Information published.</p> 3.0 2026-09-23T14:49:06 <p>Information published.</p> block: stop the timeout timer when releasing a never added disk Mariner Linux Yes CVE-2026-80589 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T02:26:28 <p>Information published.</p> 5.0 2026-09-24T02:24:44 <p>Information published.</p> 1.0 2026-08-27T01:03:43 <p>Information published.</p> 2.0 2026-09-05T01:48:38 <p>Information published.</p> 3.0 2026-09-23T02:42:54 <p>Information published.</p> 4.0 2026-09-23T15:38:22 <p>Information published.</p> inet: frags: strip GSO state from fragments before reassembly Mariner Linux Yes CVE-2026-80590 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:46:43 <p>Information published.</p> 1.0 2026-08-29T01:05:17 <p>Information published.</p> 3.0 2026-09-23T15:15:01 <p>Information published.</p> 2.0 2026-09-23T02:24:37 <p>Information published.</p> 4.0 2026-09-24T01:46:03 <p>Information published.</p> ntfs3: fix out-of-bounds read in decompress_lznt Mariner Linux Yes CVE-2026-80598 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21684-17084 1.0 2026-08-29T01:05:55 <p>Information published.</p> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Mariner Linux Yes CVE-2026-80607 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Critical 21684-17084 Critical 21892-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:02:47 <p>Information published.</p> 2.0 2026-09-23T02:13:28 <p>Information published.</p> 3.0 2026-09-24T01:36:02 <p>Information published.</p> 4.0 2026-09-24T01:50:13 <p>Information published.</p> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Mariner Linux Yes CVE-2026-80611 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Moderate 21892-17084 Moderate 21684-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:14:34 <p>Information published.</p> 4.0 2026-09-24T01:51:56 <p>Information published.</p> 1.0 2026-08-29T01:03:21 <p>Information published.</p> 3.0 2026-09-24T01:37:16 <p>Information published.</p> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Mariner Linux Yes CVE-2026-80616 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Critical 21684-17084 Critical 21932-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-29T01:07:51 <p>Information published.</p> 3.0 2026-09-24T01:57:00 <p>Information published.</p> 4.0 2026-09-24T02:11:31 <p>Information published.</p> 2.0 2026-09-23T02:32:57 <p>Information published.</p> coresight: ete: Always save state on power down Mariner Linux Yes CVE-2026-80623 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21892-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 3.0 2026-09-24T01:36:37 <p>Information published.</p> 4.0 2026-09-24T01:51:08 <p>Information published.</p> 1.0 2026-08-29T01:02:59 <p>Information published.</p> 2.0 2026-09-23T02:14:02 <p>Information published.</p> ALSA: seq: oss: Serialize readq reset state with q->lock Mariner Linux Yes CVE-2026-80628 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Low 21932-17084 Low 21684-17084 Low 21892-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21932-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21684-17084 3.6 3.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-29T01:06:17 <p>Information published.</p> 4.0 2026-09-24T02:06:09 <p>Information published.</p> 2.0 2026-09-23T02:26:01 <p>Information published.</p> 3.0 2026-09-24T01:50:04 <p>Information published.</p> octeontx2-af: npc: Fix size of entry2cntr_map Mariner Linux Yes CVE-2026-80629 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:06:55 <p>Information published.</p> 2.0 2026-09-23T02:29:07 <p>Information published.</p> 3.0 2026-09-24T01:54:28 <p>Information published.</p> 4.0 2026-09-24T02:10:41 <p>Information published.</p> btrfs: lzo: reject compressed segment that overflows the compressed input Mariner Linux Yes CVE-2026-80631 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-29T01:04:45 <p>Information published.</p> 2.0 2026-09-23T02:21:51 <p>Information published.</p> 3.0 2026-09-24T01:44:32 <p>Information published.</p> 4.0 2026-09-24T02:00:52 <p>Information published.</p> netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag Mariner Linux Yes CVE-2026-80634 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21892-17084 2.5 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:04:25 <p>Information published.</p> 2.0 2026-09-23T02:20:32 <p>Information published.</p> 3.0 2026-09-24T01:43:15 <p>Information published.</p> 4.0 2026-09-24T01:58:48 <p>Information published.</p> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Mariner Linux Yes CVE-2026-80637 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Critical 21684-17084 Critical 21892-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:05:49 <p>Information published.</p> 4.0 2026-09-24T02:05:11 <p>Information published.</p> 2.0 2026-09-23T02:25:41 <p>Information published.</p> 3.0 2026-09-24T01:49:20 <p>Information published.</p> EDAC/igen6: Fix call trace due to missing release() Mariner Linux Yes CVE-2026-80643 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-29T01:06:49 <p>Information published.</p> 2.0 2026-09-23T02:28:49 <p>Information published.</p> 4.0 2026-09-24T02:09:21 <p>Information published.</p> 3.0 2026-09-24T01:53:57 <p>Information published.</p> media: atomisp: gc2235: fix UAF and memory leak Mariner Linux Yes CVE-2026-80650 21892-17084 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 Critical 21892-17084 Critical 21684-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 2.0 2026-09-23T02:24:58 <p>Information published.</p> 1.0 2026-08-29T01:05:30 <p>Information published.</p> 3.0 2026-09-24T01:47:03 <p>Information published.</p> 4.0 2026-09-24T02:02:42 <p>Information published.</p> scsi: hisi_sas: Add slave_destroy interface for v3 hw Mariner Linux Yes CVE-2026-80653 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Critical 21684-17084 Critical 21932-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 2.0 2026-09-23T02:15:53 <p>Information published.</p> 3.0 2026-09-24T01:38:37 <p>Information published.</p> 1.0 2026-08-29T01:03:34 <p>Information published.</p> 4.0 2026-09-24T01:53:45 <p>Information published.</p> soc: xilinx: Shutdown and free rx mailbox channel Mariner Linux Yes CVE-2026-80654 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Critical 21684-17084 Critical 21892-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:04:19 <p>Information published.</p> 3.0 2026-09-24T01:42:38 <p>Information published.</p> 2.0 2026-09-23T02:20:11 <p>Information published.</p> 4.0 2026-09-24T01:57:56 <p>Information published.</p> netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Mariner Linux Yes CVE-2026-80668 21932-17084 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 Moderate 21932-17084 Moderate 21684-17084 Moderate 21892-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21932-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U 21892-17084 Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 1.0 2026-08-29T01:05:36 <p>Information published.</p> 4.0 2026-09-24T02:03:20 <p>Information published.</p> 2.0 2026-09-23T02:25:24 <p>Information published.</p> 3.0 2026-09-24T01:48:33 <p>Information published.</p> 5.0 2026-10-24T14:44:54 <p>Information published.</p> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Mariner Linux Yes CVE-2026-80670 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Low 21684-17084 Low 21892-17084 Low 21932-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21892-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:04:12 <p>Information published.</p> 2.0 2026-09-23T02:19:51 <p>Information published.</p> 3.0 2026-09-24T01:41:54 <p>Information published.</p> 4.0 2026-09-24T01:57:15 <p>Information published.</p> Drivers: hv: vmbus: use generic driver_override infrastructure Mariner Linux Yes CVE-2026-80676 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:06:29 <p>Information published.</p> 2.0 2026-09-23T02:26:59 <p>Information published.</p> 4.0 2026-09-24T02:06:49 <p>Information published.</p> 3.0 2026-09-24T01:51:51 <p>Information published.</p> i2c: imx: Fix slave registration race and error handling Mariner Linux Yes CVE-2026-80678 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:37:40 <p>Information published.</p> 1.0 2026-08-29T01:04:00 <p>Information published.</p> 2.0 2026-09-11T01:55:26 <p>Information published.</p> 3.0 2026-09-25T02:08:53 <p>Information published.</p> s390/dasd: Fix potential NULL pointer dereference Mariner Linux Yes CVE-2026-80679 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:54:35 <p>Information published.</p> 1.0 2026-08-29T01:06:42 <p>Information published.</p> 3.0 2026-09-25T02:21:10 <p>Information published.</p> 2.0 2026-09-11T01:56:28 <p>Information published.</p> i2c: amd-mp2: Unregister callback on adapter add failure Mariner Linux Yes CVE-2026-80680 21684-17084 21684-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:55:50 <p>Information published.</p> 1.0 2026-08-29T01:07:01 <p>Information published.</p> 2.0 2026-09-11T01:56:36 <p>Information published.</p> 3.0 2026-09-25T02:22:39 <p>Information published.</p> vxlan: re-fetch eth header after route_shortcircuit() Mariner Linux Yes CVE-2026-80681 21684-17084 21684-17084 Critical 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:45:11 <p>Information published.</p> 2.0 2026-09-11T01:55:57 <p>Information published.</p> 3.0 2026-09-25T02:15:04 <p>Information published.</p> 1.0 2026-08-29T01:05:11 <p>Information published.</p> KVM: s390: pci: Fix NULL dereference on AIBV allocation failure Mariner Linux Yes CVE-2026-80684 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:33:06 <p>Information published.</p> 1.0 2026-08-29T01:03:06 <p>Information published.</p> 2.0 2026-09-11T01:55:03 <p>Information published.</p> 3.0 2026-09-25T02:04:45 <p>Information published.</p> mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE Mariner Linux Yes CVE-2026-80686 21684-17084 21892-17084 21684-17084 21892-17084 Critical 21684-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:53:10 <p>Information published.</p> 1.0 2026-08-29T01:06:23 <p>Information published.</p> 2.0 2026-09-23T02:26:22 <p>Information published.</p> 3.0 2026-09-23T15:17:08 <p>Information published.</p> 4.0 2026-09-24T01:50:51 <p>Information published.</p> tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions Mariner Linux Yes CVE-2026-80689 21684-17084 21892-17084 21684-17084 21892-17084 Moderate 21684-17084 Moderate 21892-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21892-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Security Update 21684-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 6.0 2026-10-02T03:59:55 <p>Information published.</p> 2.0 2026-09-16T01:47:02 <p>Information published.</p> 3.0 2026-09-23T02:30:50 <p>Information published.</p> 5.0 2026-09-24T01:55:00 <p>Information published.</p> 1.0 2026-08-29T01:07:26 <p>Information published.</p> 4.0 2026-09-23T15:21:43 <p>Information published.</p> scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE Mariner Linux Yes CVE-2026-80691 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:36:03 <p>Information published.</p> 1.0 2026-08-29T01:03:41 <p>Information published.</p> 2.0 2026-09-11T01:55:19 <p>Information published.</p> 3.0 2026-09-25T02:07:16 <p>Information published.</p> Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks Mariner Linux Yes CVE-2026-80692 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 4.7 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes Release Notes 21932-17084 Security Update 6.6.159.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 2.0 2026-09-23T02:18:38 <p>Information published.</p> 3.0 2026-09-24T01:40:58 <p>Information published.</p> 1.0 2026-08-29T01:04:06 <p>Information published.</p> 4.0 2026-09-24T01:56:05 <p>Information published.</p> 5.0 2026-10-24T14:44:50 <p>Information published.</p> net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller Mariner Linux Yes CVE-2026-80694 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Critical 21684-17084 Critical 21892-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:03:28 <p>Information published.</p> 2.0 2026-09-23T02:15:09 <p>Information published.</p> 3.0 2026-09-24T01:37:58 <p>Information published.</p> 4.0 2026-09-24T01:52:38 <p>Information published.</p> hwmon: (sht3x) Fix unaligned accesses Mariner Linux Yes CVE-2026-80695 21684-17084 21932-17084 21892-17084 21684-17084 21932-17084 21892-17084 Moderate 21684-17084 Moderate 21932-17084 Moderate 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 Release Notes 21932-17084 21892-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 21892-17084 Release Notes 1.0 2026-08-29T01:03:47 <p>Information published.</p> 2.0 2026-09-23T02:16:39 <p>Information published.</p> 3.0 2026-09-24T01:39:26 <p>Information published.</p> 4.0 2026-09-24T01:54:23 <p>Information published.</p> erofs: ensure valid f_path for page cache sharing Mariner Linux Yes CVE-2026-80697 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-29T01:07:32 <p>Information published.</p> dmaengine: idxd: fix double free of wq, engine, and group structs Mariner Linux Yes CVE-2026-80698 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Critical 21684-17084 Critical 21892-17084 Critical 21932-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:06:36 <p>Information published.</p> 4.0 2026-09-24T02:08:38 <p>Information published.</p> 2.0 2026-09-23T02:28:21 <p>Information published.</p> 3.0 2026-09-24T01:53:13 <p>Information published.</p> drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size Mariner Linux Yes CVE-2026-80702 21684-17084 21684-17084 Moderate 21684-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:31:25 <p>Information published.</p> 1.0 2026-08-29T01:02:53 <p>Information published.</p> 2.0 2026-09-11T01:54:55 <p>Information published.</p> 3.0 2026-09-25T02:03:56 <p>Information published.</p> drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Mariner Linux Yes CVE-2026-80703 21684-17084 21684-17084 Moderate 21684-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:57:09 <p>Information published.</p> 1.0 2026-08-29T01:07:08 <p>Information published.</p> 3.0 2026-09-25T02:23:16 <p>Information published.</p> 2.0 2026-09-11T01:56:44 <p>Information published.</p> drm/amd/display: use proper context for logging Mariner Linux Yes CVE-2026-80704 21684-17084 21892-17084 21932-17084 21684-17084 21892-17084 21932-17084 Moderate 21684-17084 Moderate 21892-17084 Moderate 21932-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21892-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21932-17084 Release Notes 21892-17084 21932-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 21932-17084 Release Notes 1.0 2026-08-29T01:03:53 <p>Information published.</p> 2.0 2026-09-23T02:17:21 <p>Information published.</p> 3.0 2026-09-24T01:40:08 <p>Information published.</p> 4.0 2026-09-24T01:55:11 <p>Information published.</p> can: softing: fw_parse(): validate firmware record spans Mariner Linux Yes CVE-2026-80706 21684-17084 21684-17084 Important 21684-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:39:14 <p>Information published.</p> 1.0 2026-08-29T01:04:39 <p>Information published.</p> 2.0 2026-09-11T01:55:34 <p>Information published.</p> 3.0 2026-09-25T02:12:44 <p>Information published.</p> can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Mariner Linux Yes CVE-2026-80707 21684-17084 21684-17084 Low 21684-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:42:13 <p>Information published.</p> 2.0 2026-09-11T01:55:50 <p>Information published.</p> 3.0 2026-09-25T02:14:25 <p>Information published.</p> 1.0 2026-08-29T01:04:58 <p>Information published.</p> s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() Mariner Linux Yes CVE-2026-80708 21684-17084 21684-17084 Moderate 21684-17084 7.1 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:34:35 <p>Information published.</p> 1.0 2026-08-29T01:03:12 <p>Information published.</p> 2.0 2026-09-11T01:55:11 <p>Information published.</p> 3.0 2026-09-25T02:05:12 <p>Information published.</p> s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs Mariner Linux Yes CVE-2026-80709 21684-17084 21684-17084 Critical 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:48:26 <p>Information published.</p> 2.0 2026-09-11T01:56:05 <p>Information published.</p> 3.0 2026-09-25T02:15:58 <p>Information published.</p> 1.0 2026-08-29T01:05:24 <p>Information published.</p> ipvs: do not propagate one-packet flag to synced conns Mariner Linux Yes CVE-2026-80714 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:40:49 <p>Information published.</p> 1.0 2026-08-29T01:04:52 <p>Information published.</p> 2.0 2026-09-11T01:55:42 <p>Information published.</p> 3.0 2026-09-25T02:13:45 <p>Information published.</p> igc: remove napi_synchronize() in igc_down() Mariner Linux Yes CVE-2026-80715 21684-17084 21892-17084 21684-17084 21892-17084 Critical 21684-17084 Critical 21892-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21892-17084 Release Notes 21892-17084 Security Update 6.6.157.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21892-17084 Release Notes 5.0 2026-10-02T03:43:47 <p>Information published.</p> 2.0 2026-09-23T02:22:34 <p>Information published.</p> 1.0 2026-08-29T01:05:05 <p>Information published.</p> 3.0 2026-09-23T15:14:31 <p>Information published.</p> 4.0 2026-09-24T01:45:23 <p>Information published.</p> sctp: validate Adaptation Indication parameter length Mariner Linux Yes CVE-2026-80717 21684-17084 21684-17084 Moderate 21684-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 5.0 2026-10-02T04:03:55 <p>Information published.</p> 4.0 2026-09-25T02:25:44 <p>Information published.</p> 1.0 2026-08-29T01:07:58 <p>Information published.</p> 2.0 2026-09-05T02:18:24 <p>Information published.</p> 3.0 2026-09-11T01:57:09 <p>Information published.</p> mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() Mariner Linux Yes CVE-2026-80718 21684-17084 21684-17084 Moderate 21684-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:51:23 <p>Information published.</p> 1.0 2026-08-29T01:06:04 <p>Information published.</p> 2.0 2026-09-11T01:56:20 <p>Information published.</p> 3.0 2026-09-25T02:18:56 <p>Information published.</p> Bluetooth: ISO: ensure no dangling hcon references in iso_conn Mariner Linux Yes CVE-2026-80721 21684-17084 21684-17084 Critical 21684-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 21684-17084 1.0 2026-08-29T01:06:11 <p>Information published.</p> wifi: mac80211: validate individual TWT params before driver setup Mariner Linux Yes CVE-2026-80722 21684-17084 21684-17084 Moderate 21684-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 Release Notes 21684-17084 Security Update 6.6.152.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21684-17084 Release Notes 4.0 2026-10-02T03:49:55 <p>Information published.</p> 1.0 2026-08-29T01:05:42 <p>Information published.</p> 2.0 2026-09-11T01:56:13 <p>Information published.</p> 3.0 2026-09-25T02:18:09 <p>Information published.</p> Gdk-pixbuf: gdk-pixbuf: invalid write in jpeg icc profile parser on error recovery Mariner redhat Yes CVE-2026-81893 Out-of-bounds Write 21618-17084 21896-17084 21618-17084 21896-17084 Moderate 21618-17084 Moderate 21896-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U 21618-17084 4.7 4.3 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U 21896-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21618-17084 Security Update 2.42.10-6 21618-17084 Release Notes 21896-17084 Security Update 2.42.10-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21896-17084 Release Notes 6.0 2026-10-02T01:45:25 <p>Information published.</p> 1.0 2026-09-02T01:04:54 <p>Information published.</p> 2.0 2026-09-08T01:53:30 <p>Information published.</p> 5.0 2026-09-25T02:34:03 <p>Information published.</p> 3.0 2026-09-11T01:59:06 <p>Information published.</p> 4.0 2026-09-23T02:37:56 <p>Information published.</p> gitoxide before 0.52.1 Path Traversal via Submodule Name Mariner VulnCheck Yes CVE-2026-82251 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21716-17084 21752-17084 21716-17084 21752-17084 Important 21716-17084 Important 21752-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21752-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21716-17084 Security Update 21716-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21752-17084 Security Update 1.96.1-2 21752-17084 1.0 2026-09-02T01:05:29 <p>Information published.</p> 2.0 2026-09-07T01:55:00 <p>Information published.</p> 3.0 2026-09-09T01:53:58 <p>Information published.</p> 6.0 2026-09-18T01:49:27 <p>Information published.</p> 4.0 2026-09-09T14:50:28 <p>Information published.</p> 5.0 2026-09-12T14:45:24 <p>Information published.</p> gitoxide before 0.52.1 Repository Boundary Violation via symlinked .gitmodules Mariner VulnCheck Yes CVE-2026-82252 Improper Link Resolution Before File Access ('Link Following') 21716-17084 21752-17084 21716-17084 21752-17084 Important 21716-17084 Important 21752-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21752-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21716-17084 Security Update 21716-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21752-17084 Security Update 1.96.1-2 21752-17084 1.0 2026-09-02T01:05:58 <p>Information published.</p> 2.0 2026-09-07T01:55:54 <p>Information published.</p> 3.0 2026-09-09T01:54:10 <p>Information published.</p> 5.0 2026-09-12T14:45:32 <p>Information published.</p> 6.0 2026-09-18T01:49:36 <p>Information published.</p> 4.0 2026-09-09T14:50:37 <p>Information published.</p> gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass Mariner VulnCheck Yes CVE-2026-82253 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21716-17084 21752-17084 21716-17084 21752-17084 Important 21716-17084 Important 21752-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21752-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21716-17084 Security Update 21716-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21752-17084 Security Update 1.96.1-2 21752-17084 1.0 2026-09-02T01:05:39 <p>Information published.</p> 2.0 2026-09-07T01:55:19 <p>Information published.</p> 3.0 2026-09-09T01:54:04 <p>Information published.</p> 4.0 2026-09-09T14:50:47 <p>Information published.</p> 5.0 2026-09-12T14:45:40 <p>Information published.</p> 6.0 2026-09-18T01:49:45 <p>Information published.</p> gitoxide before 0.69.0 Denial of Service via gix-pack Mariner VulnCheck Yes CVE-2026-82254 Uncaught Exception 21500-17084 21716-17084 21840-17084 21752-17084 21918-17084 21500-17084 21716-17084 21840-17084 21752-17084 21918-17084 Important 21500-17084 Important 21716-17084 Important 21840-17084 Important 21752-17084 Important 21918-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21716-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21840-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21752-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21918-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21500-17084 21716-17084 21752-17084 Security Update 21500-17084 21716-17084 21752-17084 Release Notes 21840-17084 21918-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21840-17084 21918-17084 Release Notes 1.0 2026-09-02T01:05:49 <p>Information published.</p> 2.0 2026-09-07T01:55:35 <p>Information published.</p> 4.0 2026-09-09T14:50:19 <p>Information published.</p> 7.0 2026-09-25T02:36:05 <p>Information published.</p> 3.0 2026-09-08T14:46:11 <p>Information published.</p> 5.0 2026-09-23T02:39:55 <p>Information published.</p> 6.0 2026-09-24T01:59:41 <p>Information published.</p> Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data Mariner redhat Yes CVE-2026-82327 Improper Validation of Array Index 21773-17084 21773-17084 Low 21773-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L 21773-17084 Release Notes 21773-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21773-17084 Release Notes 1.0 2026-09-02T01:05:01 <p>Information published.</p> 2.0 2026-09-07T01:54:17 <p>Information published.</p> 3.0 2026-09-25T02:34:36 <p>Information published.</p> RubyGems before 4.0.13 Path Traversal via Symlink Resolution Mariner VulnCheck Yes CVE-2026-82455 Improper Link Resolution Before File Access ('Link Following') 21312-17084 21839-17084 21905-17084 21312-17084 21839-17084 21905-17084 Moderate 21312-17084 Moderate 21839-17084 Moderate 21905-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21312-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21839-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H 21905-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21312-17084 Security Update 21312-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21839-17084 Security Update 3.3.5-10 21839-17084 Release Notes 21905-17084 Security Update 3.3.5-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21905-17084 Release Notes 6.0 2026-10-02T01:48:53 <p>Information published.</p> 1.0 2026-09-02T01:05:20 <p>Information published.</p> 2.0 2026-09-08T01:53:40 <p>Information published.</p> 3.0 2026-09-09T14:50:00 <p>Information published.</p> 4.0 2026-09-11T01:59:26 <p>Information published.</p> 5.0 2026-09-23T02:38:38 <p>Information published.</p> Sudo through 1.9.17p2 Intercept Policy Bypass via execveat Mariner VulnCheck Yes CVE-2026-82474 Protection Mechanism Failure 21765-17084 21765-17084 Important 21765-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21765-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21765-17084 Security Update 1.9.17-3 21765-17084 1.0 2026-08-31T14:03:09 <p>Information published.</p> 2.0 2026-09-06T04:38:21 <p>Information published.</p> valkey-io valkey Blocked-on-keys blocked.c handleClientsBlockedOnKey use after free Mariner VulDB Yes CVE-2026-82631 Use After Free 21628-17084 21628-17084 Low 21628-17084 2.2 2.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C 21628-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21628-17084 Security Update 8.0.11-1 21628-17084 1.0 2026-09-02T01:06:14 <p>Information published.</p> 2.0 2026-09-06T04:48:03 <p>Information published.</p> CVE-2026-19137 Use after free in WebGL <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19137 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:01:41 <p>Information published.</p> CVE-2026-19138 Heap buffer overflow in CrashReporting <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19138 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:01:46 <p>Information published.</p> CVE-2026-19139 Race in CredentialProvider <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19139 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:01:49 <p>Information published.</p> CVE-2026-19140 Use after free in GPU <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19140 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:01:52 <p>Information published.</p> CVE-2026-19142 Use after free in Views <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19142 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:01:55 <p>Information published.</p> CVE-2026-19144 Use after free in HTML <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19144 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:01:58 <p>Information published.</p> CVE-2026-19145 Use after free in Translate <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19145 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:01 <p>Information published.</p> CVE-2026-19146 Uninitialized Use in GPU <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19146 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:04 <p>Information published.</p> CVE-2026-19147 Use after free in Aura <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19147 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:07 <p>Information published.</p> CVE-2026-19148 Out of bounds write in GPU <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19148 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:11 <p>Information published.</p> CVE-2026-19149 Use after free in Aura <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19149 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:14 <p>Information published.</p> CVE-2026-19150 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19150 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:16 <p>Information published.</p> CVE-2026-19151 Use after free in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19151 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:19 <p>Information published.</p> CVE-2026-19152 Inappropriate implementation in Navigation <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19152 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:23 <p>Information published.</p> CVE-2026-19153 Insufficient validation of untrusted input in Workers <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19153 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:26 <p>Information published.</p> CVE-2026-19155 Use after free in Payments <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19155 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:29 <p>Information published.</p> CVE-2026-19156 Heap buffer overflow in Base <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19156 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:32 <p>Information published.</p> CVE-2026-19157 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19157 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:36 <p>Information published.</p> CVE-2026-19158 Use after free in Views <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19158 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:39 <p>Information published.</p> CVE-2026-19159 Use after free in Views <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19159 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:41 <p>Information published.</p> CVE-2026-19160 Uninitialized Use in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19160 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:45 <p>Information published.</p> CVE-2026-19161 Uninitialized Use in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19161 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:47 <p>Information published.</p> CVE-2026-19162 Out of bounds write in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19162 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:50 <p>Information published.</p> CVE-2026-19163 Use after free in Media <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19163 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:53 <p>Information published.</p> CVE-2026-19164 Insufficient validation of untrusted input in Codecs <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19164 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:56 <p>Information published.</p> CVE-2026-19165 Use after free in Extensions <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19165 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:02:59 <p>Information published.</p> CVE-2026-19166 Use after free in Web Authentication <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19166 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:02 <p>Information published.</p> CVE-2026-19167 Integer overflow in GPU <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19167 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:05 <p>Information published.</p> CVE-2026-19168 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19168 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:09 <p>Information published.</p> CVE-2026-19169 Insufficient validation of untrusted input in Contextual Tasks <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19169 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:12 <p>Information published.</p> CVE-2026-19170 Use after free in WebGL <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19170 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:15 <p>Information published.</p> CVE-2026-19171 Use after free in Media <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19171 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:18 <p>Information published.</p> CVE-2026-19172 Use after free in Views <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19172 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:21 <p>Information published.</p> CVE-2026-19173 Out of bounds write in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19173 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:24 <p>Information published.</p> CVE-2026-19174 Integer overflow in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19174 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:27 <p>Information published.</p> CVE-2026-19175 Use after free in Payments <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19175 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Release Notes 21955 No Security Update 152.0.4191.135 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes 1.0 2026-08-11T17:03:30 <p>Information published.</p> 2.0 2026-10-28T17:06:22 <p>Information published.</p> CVE-2026-19176 Use after free in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19176 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:33 <p>Information published.</p> CVE-2026-19177 Insufficient validation of untrusted input in UI <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19177 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-11T17:03:35 <p>Information published.</p> Chromium: CVE-2026-19556 Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.86</td> <td>08/14/2026</td> <td>151.0.7922.138</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19556 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.86 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-14T16:37:11 <p>Information published.</p> Chromium: CVE-2026-19557 Use after free in TabStrip <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.86</td> <td>08/14/2026</td> <td>151.0.7922.138</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19557 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.86 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-14T16:37:14 <p>Information published.</p> Chromium: CVE-2026-19558 Use after free in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.86</td> <td>08/14/2026</td> <td>151.0.7922.138</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19558 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.86 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-14T16:37:16 <p>Information published.</p> Chromium: CVE-2026-19559 Use after free in HTML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.86</td> <td>08/14/2026</td> <td>151.0.7922.138</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19559 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.86 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-14T16:37:19 <p>Information published.</p> Chromium: CVE-2026-19560 Use after free in Blink <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.86</td> <td>08/14/2026</td> <td>151.0.7922.138</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-19560 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.86 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-14T16:37:22 <p>Information published.</p> Microsoft Copilot Information Disclosure Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Copilot Microsoft No CVE-2026-24301 Improper Neutralization of Special Elements used in a Command ('Command Injection') 20756 Information Disclosure 20756 Critical 20756 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20756 <a href="https://x.com/leocrimson">Anshuman Goel</a> with <a href="https://microsoft.com/">Microsoft</a> <a href="https://www.linkedin.com/in/spandan0x50">Spandan Pokhrel</a> <a href="https://www.linkedin.com/in/lior-adar-8902a6129">Lior Adar</a> with <a href="http://varonis.com/">Varonis</a> 1.0 2026-08-18T07:00:00 <p>Information published.</p> 1.1 2026-08-25T07:00:00 <p>Acknowledgement Updated</p> Microsoft Dynamics Business Central Information Disclosure Vulnerability <p>Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> <p><strong>What action should customers using Microsoft Dynamics 365 Business Central 2024 Release Wave 2 (version 25.x) take?</strong></p> <p>Version 25.x has reached the end of support and will not receive a security update for this vulnerability. Customers should upgrade to version 26.14 or later; see the <a href="https://learn.microsoft.com/en-us/lifecycle/products/dynamics-365-business-central-onpremises-modern-policy">Dynamics 365 Business Central on-premises lifecycle policy</a> and <a href="https://support.microsoft.com/help/5100263">KB 5100263</a> for more information.</p> Dynamics Business Central Microsoft Yes CVE-2026-40375 Missing Authorization 11603-10378 11746-10378 Information Disclosure 11603-10378 Information Disclosure 11746-10378 Important 11603-10378 Important 11746-10378 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11603-10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11746-10378 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108851 5010202 11603-10378 Yes Security Update 30713 https://support.microsoft.com/en-us/servicing/dynamics/nav/update/2021/12/cumulative-update-61-for-microsoft-dynamics-nav-2017-build-30699 11603-10378 Release Notes Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108852 5022710 11746-10378 Yes Security Update 11.0.50736.0 https://support.microsoft.com/en-gb/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618 11746-10378 Release Notes <a href="https://www.linkedin.com/in/nhienit/">nhienit</a> with <a href="https://galaxy.one/">Galaxy One</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows RPC API Microsoft Yes CVE-2026-42976 Missing Authentication for Critical Function 11569 11923 11924 11572 11568 11571 11930 11929 11931 12098 12099 12097 12437 20438 20437 12389 12390 12436 20853 20854 10852 10853 10855 10816 10379 10378 10483 10543 Elevation of Privilege 11569 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11572 Elevation of Privilege 11568 Elevation of Privilege 11571 Elevation of Privilege 11930 Elevation of Privilege 11929 Elevation of Privilege 11931 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12097 Elevation of Privilege 12437 Elevation of Privilege 20438 Elevation of Privilege 20437 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10855 Elevation of Privilege 10816 Elevation of Privilege 10379 Elevation of Privilege 10378 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11569 Important 11923 Important 11924 Important 11572 Important 11568 Important 11571 Important 11930 Important 11929 Important 11931 Important 12098 Important 12099 Important 12097 Important 12437 Important 20438 Important 20437 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10855 Important 10816 Important 10379 Important 10378 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11569 11572 11568 11571 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11569 11572 11568 11571 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11930 11929 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11930 11929 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12098 12099 12097 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12098 12099 12097 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20438 20437 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20438 20437 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20438 20437 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20438 20437 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10855 10816 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10855 10816 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10379 10378 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10379 10378 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.1 2026-08-12T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Visual Studio Code Information Disclosure Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have be enticed to open a malicious file in vscode. Users should never open anything that they do not know or trust to be safe.</p> Visual Studio Code Microsoft Yes CVE-2026-47285 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11622 Information Disclosure 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://rayhan.ch/">Rayhan</a> <a href="https://rayhan.ch/">Rayhan</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Azure Monitor Agent Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successfully exploiting this vulnerability could bypass extension allowlist–based protections that are intended to limit which Azure Arc or Azure VM extensions can perform actions on a machine. In certain hardened configurations, this could allow a monitoring-only extension to run commands with elevated privileges in ways that were not intended by the security configuration.</p> Azure Monitor Agent Microsoft Yes CVE-2026-47299 Improper Neutralization of Special Elements used in a Command ('Command Injection') 21363 Elevation of Privilege 21363 Important 21363 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21363 Release Notes https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-manage?tabs=azure-portal 21363 No Security Update 1.43 https://learn.microsoft.com/en-us/azure/azure-monitor/agents/azure-monitor-agent-extension-versions 21363 Release Notes <a href="https://twitter.com/ronmasas">Ron Masas</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Application Insights Profiler Elevation of Privilege Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Application Insights Profiler allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Application Insights Profiler Microsoft No CVE-2026-49163 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21531 Elevation of Privilege 21531 Critical 21531 Publicly Disclosed:No;Exploited:No 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21531 Anonymous 1.0 2026-08-06T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>A domain‑authenticated attacker with access to the NSPI RPC interface can provide crafted inputs that trigger an out‑of‑bounds write in the directory service process, leading to memory corruption/remote code execution.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploits this vulnerability could achieve remote code execution without user interaction.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.</p> Windows Active Directory Microsoft Yes CVE-2026-49179 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows LUAFV Microsoft Yes CVE-2026-50472 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Active Directory Elevation of Privilege Vulnerability <p>Modification of assumed-immutable data (maid) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.</p> Azure Active Directory Microsoft No CVE-2026-50481 Modification of Assumed-Immutable Data (MAID) 11963 Elevation of Privilege 11963 Critical 11963 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L/E:U/RL:O/RC:C 11963 Anonymous 1.0 2026-08-06T07:00:00 <p>Information published.</p> Azure Service Bus Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Azure Service Bus allows an authorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Service Bus Microsoft No CVE-2026-50515 Deserialization of Untrusted Data 21593 Remote Code Execution 21593 Critical 21593 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21593 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Azure Kubernetes Service allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Azure Kubernetes Service Microsoft No CVE-2026-50516 Missing Authentication for Critical Function 11870 Elevation of Privilege 11870 Critical 11870 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.4 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 11870 Shay Shavit with Microsoft 1.0 2026-08-06T07:00:00 <p>Information published.</p> Microsoft PowerShell Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.</p> Microsoft PowerShell Microsoft Yes CVE-2026-50523 Improper Neutralization of Special Elements used in a Command ('Command Injection') 16787 21227 12262 Remote Code Execution 16787 Remote Code Execution 21227 Remote Code Execution 12262 Important 16787 Important 21227 Important 12262 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16787 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21227 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12262 16787 Maybe Security Update 7.5.10.0 16787 21227 Maybe Security Update 7.6.5 21227 12262 Maybe Security Update 7.4.19.0 12262 <a href="https://zpbrent.github.io/">Peng Zhou (zpbrent)</a> <a href="https://github.com/uchia6861-tech">Abdulkareem Azeez</a> <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a> <a href="https://x.com/hasanfleyah">HASAN FLAYYIH ABDULLAH</a> <a href="https://twitter.com/tzahpahima">Tzah Pahima</a> <a href="https://twitter.com/tzahpahima">Tzah Pahima</a> <a href="https://www.linkedin.com/in/rijul-jenjen">Rijul JenJen (PortZero Gmbh)</a> with <a href="https://port-zero.com/en">Port Zero GmbH ( Berlin ,Germany )</a> Lucas Futures <a href="https://github.com/uchia6861-tech">Abdulkareem Azeez</a> <a href="https://www.linkedin.com/in/brian-linke-2789621a9/">blinke182</a> Tahira Muhammad with Student @ College of Southern Nevada 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-14T07:00:00 <p>The security updates for Powershell have been updated.</p> Remote Procedure Call Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.</p> Windows Kernel Microsoft Yes CVE-2026-54113 Allocation of Resources Without Limits or Throttling 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.</p> <p><strong>What information could be disclosed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view Microsoft Defender for Endpoint configuration exclusion settings that are intended to be viewable only by administrators.</p> Microsoft Defender for Endpoint Microsoft Yes CVE-2026-54123 Exposure of Sensitive Information to an Unauthorized Actor 12014 Information Disclosure 12014 Important 12014 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12014 Release Notes 12014 No Security Update 101.26042.0020 https://learn.microsoft.com/en-us/defender-endpoint/mac-updates?view=o365-worldwide 12014 Release Notes Abhishek Mundhra with PwC 1.0 2026-08-11T07:00:00 <p>Information published.</p> Visual Studio Code Python Extension Security Feature Bypass Vulnerability <p>Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L) but no privileges are required (PR:N) and user interaction is required (UI:R). How could an attacker exploit this security feature bypass vulnerability?</strong></p> <p>The attack itself is carried out locally by a user with authentication to the targeted system. An attacker could exploit the vulnerability by convincing a victim, through social engineering, to download and open a specially crafted file from a website which could lead to a local attack on the victim computer.</p> Visual Studio Code - Python extension Microsoft Yes CVE-2026-54981 Inclusion of Functionality from Untrusted Control Sphere Protection Mechanism Failure 11873 Security Feature Bypass 11873 Important 11873 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11873 https://github.com/microsoft/pylance-release/releases/tag/2026.3.1 11873 Maybe Security Update 2026.3.1 11873 <a href="https://x.com/zemnmez">Thomas Neil James Shadwell (zemnmez)</a> with <a href="https://openai.com/">OpenAI</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-21T07:00:00 <p>Affected software updated with new package information.</p> 2.1 2026-09-24T07:00:00 <p>Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.</p> Windows Imaging Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.</p> Windows Imaging Component Microsoft Yes CVE-2026-54984 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Kagan Capar (kagancapar) working with TrendAI Zero Day Initiative 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Help Defense Spoofing Vulnerability <p>Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally.</p> Windows Remote Help Defense Microsoft Yes CVE-2026-55013 Uncontrolled Search Path Element 21548 Spoofing 21548 Important 21548 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21548 Release Notes https://catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=21a0ea07-2ef5-4be7-b621-07b8f1b3538e 21548 Maybe Security Update 5.2.1040.0 https://learn.microsoft.com/en-us/intune/remote-help/?tabs=windows 21548 Release Notes <a href="https://www.linkedin.com/in/nick-agathos/">Nick Agathos</a> with Commonwealth Bank of Australia 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Remote Help Denial of Service Vulnerability <p>Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally.</p> Windows Remote Help Microsoft Yes CVE-2026-55015 Uncontrolled Search Path Element 21548 Denial of Service 21548 Important 21548 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21548 Release Notes https://catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=21a0ea07-2ef5-4be7-b621-07b8f1b3538e 21548 Maybe Security Update 5.2.1040.0 https://learn.microsoft.com/en-us/intune/remote-help/?tabs=windows 21548 Release Notes <a href="https://www.linkedin.com/in/nick-agathos/">Nick Agathos</a> with Commonwealth Bank of Australia 1.0 2026-08-20T07:00:00 <p>Information published.</p> Azure Logic Apps Information Disclosure Vulnerability <p>Improper access control in Azure Logic Apps allows an authorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Logic Apps Microsoft No CVE-2026-56161 Improper Access Control 20835 Information Disclosure 20835 Critical 20835 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20835 Haakon Gulbrandsrud with <a href="https://binarysecurity.no/">Binary Security</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> Azure SQL Database Elevation of Privilege Vulnerability <p>Improper authentication in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SQL Database Microsoft No CVE-2026-56162 Improper Authentication 21621 Elevation of Privilege 21621 Critical 21621 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21621 Sam 1.0 2026-08-06T07:00:00 <p>Information published.</p> Windows Narrator Braille Elevation of Privilege Vulnerability <p>Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.</p> Windows Narrator Braille Microsoft Yes CVE-2026-56174 Untrusted Search Path 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 12242 12243 12436 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12436 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 12242 Important 12243 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y), with </a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Network Address Translation (NAT) Spoofing Vulnerability <p>Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.</p> Windows Network Address Translation (NAT) Microsoft Yes CVE-2026-56179 Origin Validation Error 12437 20437 20438 12389 12390 12436 20853 20854 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Moderate 12437 Moderate 20437 Moderate 20438 Moderate 12389 Moderate 12390 Moderate 12436 Moderate 20853 Moderate 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <p>The mitigation is disabled by default. To enable it, apply the following registry keys and reboot the machine.</p> <p><code>reg add HKLM\SYSTEM\CurrentControlSet\Services\Winnat /v TcpSeqValidation /t REG_DWORD /d 1 /f</code> <code>reg add HKLM\SYSTEM\CurrentControlSet\Services\Winnat /v TcpSeqRandomization /t REG_DWORD /d 1 /f</code></p> Malcolm Stagg with <a href="https://www.sodium24.com/">SODIUM-24, LLC</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Storage Explorer Elevation of Privilege Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially gain the ability to authenticate against a remote host using the current user’s credentials.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of the vulnerability requires that a user to open a specially crafted link.</p> <p>An attacker would have no way to force users to click the link. Instead, an attacker would have to convince users to click the link through social engineering.</p> Azure Storage Explorer Microsoft Yes CVE-2026-57104 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11781 Elevation of Privilege 11781 Important 11781 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11781 Release Notes https://github.com/microsoft/AzureStorageExplorer/releases/tag/v1.45.0 11781 No Security Update 1.45.0 https://github.com/microsoft/AzureStorageExplorer/releases/tag/v1.45.0 11781 Release Notes <a href="https://anandsreekumar.com/">Anand (anandsreekumar.com)</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-16T07:00:00 <p>Corrected build number for the security update. This in an informational change only.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-57105 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11585 11961 Spoofing 11585 Spoofing 11961 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> PowerShell Information Disclosure Vulnerability <p>Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> Microsoft PowerShell Core Microsoft Yes CVE-2026-58612 Server-Side Request Forgery (SSRF) 16787 12262 21227 Information Disclosure 16787 Information Disclosure 12262 Information Disclosure 21227 Important 16787 Important 12262 Important 21227 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 16787 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12262 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21227 https://github.com/PowerShell/PowerShell/releases/tag/v7.5.10 16787 Maybe Security Update 7.5.10.0 16787 https://github.com/PowerShell/PowerShell/releases/tag/v7.4.19 12262 Maybe Security Update 7.4.19.0 12262 https://github.com/PowerShell/PowerShell/releases/tag/v7.6.5 21227 Maybe Security Update 7.6.5 21227 NavSec <a href="https://zpbrent.github.io/">Peng Zhou (zpbrent)</a> Joseph Semaan <a href="https://github.com/sleepystew/">Michael Curtis</a> <a href="https://www.linkedin.com/in/charlievogt">Charlie Vogt</a> <a href="https://x.com/hasanfleyah">HASAN FLAYYIH ABDULLAH</a> PuH4ck3rX <a href="https://puh4ck3rx.github.io/">PuH4ck3rX</a> with W&amp;M Anonymous Lucas Futures <a href="https://x.com/valzevul">Vadim Drobinin (@valzevul)</a> with <a href="https://drobinin.com/">Drobinin Limited</a> Damian Regulski <a href="https://linkedin.com/in/cybera">Amar Khatri</a> murloc Theodor N. Engøy <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a> <a href="https://www.linkedin.com/in/yogi-atram/">Yogi Atram</a> <a href="https://www.linkedin.com/in/krithik-babu-p-bb97431a9/">Krithik Babu P (DarkLycn1976)</a> <a href="https://www.linkedin.com/in/alnnajafi/">AL Najafi</a> <a href="https://x.com/ayatoshitomi">Ayato</a> <a href="https://www.linkedin.com/in/krithik-babu-p-bb97431a9/">Krithik Babu P (DarkLycn1976)</a> <a href="https://www.linkedin.com/in/alnnajafi/">AL Najafi</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-14T07:00:00 <p>The security updates for Powershell have been updated.</p> 2.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> 2.2 2026-09-03T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send a victim a malicious and specially crafted file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Copilot Chat (Microsoft Edge) Microsoft Yes CVE-2026-58616 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11815 12480 11966 21776 21777 21955 Information Disclosure 11815 Information Disclosure 12480 Information Disclosure 11966 Information Disclosure 21776 Information Disclosure 21777 Information Disclosure 21955 Moderate 11815 Moderate 12480 Moderate 11966 Moderate 21776 Moderate 21777 Moderate 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.4 3.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11815 4.4 3.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 12480 4.4 3.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11966 4.4 3.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 21776 4.4 3.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 21955 Release Notes 11815 12480 11966 21776 21777 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11815 12480 11966 21776 21777 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Gal Weizman (weizmangal@gmail.com / https://x.com/weizmangal) 1.0 2026-08-28T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of NetNTLMv2 hashes.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-58639 Server-Side Request Forgery (SSRF) 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 hamayanhamayan P1hcn waid 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> .NET Microsoft Yes CVE-2026-58641 Integer Overflow or Wraparound 21782 Elevation of Privilege 21782 Important 21782 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21782 Release Notes https://www.nuget.org/packages/SkiaSharp 21782 No Security Update 4.151.2 https://github.com/mono/SkiaSharp/releases 21782 Release Notes Matthew Leibowitz 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-03T07:00:00 <p>Added SkiaSharp 4.151.2 to the affected software table.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See <a href="https://code.visualstudio.com/docs/editor/workspace-trust">Workspace Trust</a> for more information.</p> Visual Studio Code Microsoft Yes CVE-2026-58650 Authorization Bypass Through User-Controlled Key 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://github.com/samer666569">陳宥升 (CheN..)</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Microsoft Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-58651 Heap-based Buffer Overflow 21368 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Important 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a specially crafted web page and use social engineering to convince a user to have the application retrieve it. The malicious page could then cause the application to launch operating-system protocol handlers without prompting the user, which could result in code execution on the user's system. User interaction is required.</p> Visual Studio Code Microsoft Yes CVE-2026-59113 Missing Authorization 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://www.linkedin.com/in/sdalili/">Soroush Dalili</a> with <a href="https://www.bentley.com/">Bentley Systems</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-09-24T07:00:00 <p>Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability <p>'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Entra Provisioning Service (SyncFabric) Microsoft No CVE-2026-59115 Path Traversal: '.../...//' 21532 Elevation of Privilege 21532 Critical 21532 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21532 Anonymous 1.0 2026-08-06T07:00:00 <p>Information published.</p> Copilot Cowork Elevation of Privilege Vulnerability <p>Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Copilot Cowork Microsoft No CVE-2026-59118 Improper Authorization 21701 Elevation of Privilege 21701 Critical 21701 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21701 <a href="https://www.linkedin.com/in/ilan-kalendarov-4826741a0/">Ilan Kalendarov</a> with <a href="https://cymulate.com/">Cymulate</a> <a href="https://www.linkedin.com/in/elad-beber-a17946184/">Elad Beber</a> with <a href="https://cymulate.com/">Cymulate</a> <a href="https://www.linkedin.com/in/ben-zamir-401003237">Ben Zamir</a> with <a href="https://cymulate.com/">Cymulate</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> 1.1 2026-08-11T07:00:00 <p>Corrected CVE title. This is an informational change only.</p> PowerShell Elevation of Privilege Vulnerability <p>Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is Low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker with privileges could send controlled inputs to exploit this vulnerability.</p> Microsoft PowerShell Microsoft Yes CVE-2026-59119 Incorrect Default Permissions 16787 12262 21227 Elevation of Privilege 16787 Elevation of Privilege 12262 Elevation of Privilege 21227 Important 16787 Important 12262 Important 21227 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16787 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12262 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21227 16787 Maybe Security Update 7.5.10.0 16787 12262 Maybe Security Update 7.4.19.0 12262 21227 Maybe Security Update 7.6.5 21227 <a href="https://x.com/everping">Trung Nguyen</a> with <a href="https://cystack.net/">CyStack</a> 2.0 2026-08-14T07:00:00 <p>The security updates for Powershell have been updated.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> Windows Telephony Service Microsoft Yes CVE-2026-59122 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/bad_jubies">Grant Hume</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by submitting a specially crafted payload to an affected service that deserializes untrusted data. Successful exploitation could allow the attacker to execute code on the target system.</p> Microsoft High Performance Computing (HPC) Pack Microsoft Yes CVE-2026-59124 Deserialization of Untrusted Data 12455 Remote Code Execution 12455 Important 12455 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12455 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108779 12455 Maybe Security Update 6.3.8359 https://github.com/Azure/hpcpack/blob/master/CHANGELOG.md#hpc-pack-2019-update-3-qfe-kb5124659-638359---8102026 12455 Release Notes P1hcn XBREACH TEAM with <a href="https://xbreach.ai/">XBreach.ai</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-16T07:00:00 <p>Corrected the listed software in the Security Updates table. Microsoft recommends installing the security update as soon as possible.</p> 2.1 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability <p>Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Virtual Hard Disk (VHD) Miniport Driver Microsoft Yes CVE-2026-59125 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 <a href="https://www.linkedin.com/in/divyasundar16/">Divya Sundar</a> with Microsoft- MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Event Logging Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Event Logging Service Microsoft Yes CVE-2026-59126 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous yhw 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-59127 Integer Overflow or Wraparound Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely Anonymous yhw & txz AIフィジカルインターフェイス二号機 1.3 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-25T07:00:00 <p>Acknowledgement Updated</p> 1.2 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Encrypting File System (EFS) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows Encrypting File System (EFS) Microsoft Yes CVE-2026-59128 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Mathias Vorreiter Pedersen with <a href="https://microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> AMD Zen Information Disclosure Vulnerability <p>No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability</strong></p> <p>If the attacker has both the ability to modify the encrypted secret where it is stored and to observe the precise timing for the secret being decrypted by the application, the attacker could infer the original secret across many decryption attempts.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability</strong></p> <p>To exploit this vulnerability, an attacker would need to target an application by persisting encrypted secrets that are using specific old cryptography and Windows APIs.</p> AMD Zen Microsoft Yes CVE-2026-59130 Non-Transparent Sharing of Microarchitectural Resources 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Michael Monwuba with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-25T07:00:00 <p>Updated CWE value. This is an informational change only.</p> AMD Zen Information Disclosure Vulnerability <p>No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability</strong></p> <p>If the attacker has both the ability to modify the encrypted secret where it is stored and to observe the precise timing for the secret being decrypted by the application, the attacker could infer the original secret across many decryption attempts.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability</strong></p> <p>To exploit this vulnerability, an attacker would need to target an application by persisting encrypted secrets that are using specific old cryptography and Windows APIs.</p> AMD Zen Microsoft Yes CVE-2026-59131 Non-Transparent Sharing of Microarchitectural Resources 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.6 4.9 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Michael Monwuba with Microsoft 1.1 2026-08-25T07:00:00 <p>Updated CWE value. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows TCP/IP Denial of Service Vulnerability <p>Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.</p> Windows TCP/IP Microsoft Yes CVE-2026-59132 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 RedRays Security Team with <a href="https://redrays.io/">RedRays</a> RedRays Security Team with <a href="https://redrays.io/">RedRays</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability <p>Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft High Performance Computing (HPC) Pack Microsoft Yes CVE-2026-59133 Execution with Unnecessary Privileges 12455 Elevation of Privilege 12455 Important 12455 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12455 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108779 12455 Maybe Security Update 6.3.8359 https://github.com/Azure/hpcpack/blob/master/CHANGELOG.md#hpc-pack-2019-update-3-qfe-kb5124659-638359---8102026 12455 Release Notes P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-27T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Remote Desktop Client Microsoft Yes CVE-2026-59134 Heap-based Buffer Overflow Improper Input Validation 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> Thanatos Tian (HKPolyU) &amp; PB18 &amp; @2st__ with Diffract pwn2addr 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-31T07:00:00 <p>Acknowledgement Updated</p> Microsoft Windows Search Component Information Disclosure Vulnerability <p>Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-59135 Weak Authentication 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft COM for Windows Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Microsoft COM for Windows Microsoft Yes CVE-2026-59136 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Event Logging Service Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows Event Logging Service Microsoft Yes CVE-2026-59137 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 AI&#39;s physical interface 001 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Remote Registry Service Denial of Service Vulnerability <p>Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.</p> Microsoft Remote Registry Service Microsoft Yes CVE-2026-59138 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 k0shl 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Remote Registry Service Denial of Service Vulnerability <p>Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.</p> Microsoft Remote Registry Service Microsoft Yes CVE-2026-61345 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 k0shl 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-61346 Use After Free Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil</a> <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> <a href="https://www.linkedin.com/in/leo-kao-ai/">Leo Kao</a> with <a href="https://codebat.ai/">Codebat Technologies Inc.</a> Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-08-13T07:00:00 <p>Acknowledgement Updated</p> Windows Event Logging Service Information Disclosure Vulnerability <p>Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows Event Logging Service Microsoft Yes CVE-2026-61347 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous haowei yan 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-61348 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Work Folder Service Elevation of Privilege Vulnerability <p>Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Work Folder Service Microsoft Yes CVE-2026-61349 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> Younggi Park (grill66), SEC-agent team <a href="https://www.linkedin.com/in/kdj-smlijun/">Dongjun Kim (smlijun), SEC-agent team</a> AIフィジカルインターフェイス二号機 1.1 2026-09-11T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows NTFS Microsoft Yes CVE-2026-61350 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft Internal with Microsoft R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-08-11T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Remote Desktop Client Microsoft Yes CVE-2026-61352 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> Windows Telephony Service Microsoft Yes CVE-2026-61353 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian with Diffract, __2st with Diffract and wxz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Sensor Data Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Sensor Data Service Microsoft Yes CVE-2026-61355 Heap-based Buffer Overflow 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-61356 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Application Information Services Elevation of Privilege Vulnerability <p>Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Application Information Services Microsoft Yes CVE-2026-61357 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> Pwnforr777 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Accessibility Infrastructure (ATBroker.exe) Microsoft Yes CVE-2026-61358 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/cplearns2h4ck">Chen Le Qi (@cplearns2h4ck)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Microsoft Yes CVE-2026-61359 Heap-based Buffer Overflow Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely Anonymous Anonymous k0shl <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> <a href="https://www.z1r0.top/">z1r0</a> Anonymous <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST k0shl <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> pwn2addr yhw &amp; txz Killer Queen 1.2 2026-08-13T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.3 2026-10-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows GDI Information Disclosure Vulnerability <p>Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows GDI Microsoft Yes CVE-2026-61360 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Client Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Client Microsoft Yes CVE-2026-61361 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Milan Justel with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Remote Desktop Client Microsoft Yes CVE-2026-61363 Heap-based Buffer Overflow Improper Input Validation 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> Thanatos Tian (HKPolyU) &amp; PB18 &amp; wgg &amp; @2st__ with Diffract yhw &amp; txz <a href="https://www.linkedin.com/in/danielr1123/">Daniel R</a> 1.1 2026-08-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Remote Desktop Services Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-61364 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-61365 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Raymond Reskusich with Microsoft Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Network Connection Broker Elevation of Privilege Vulnerability <p>Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Network Connection Broker Microsoft Yes CVE-2026-61366 Double Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> Younggi Park (grill66), SEC-agent team <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (nevul37), SEC-agent team</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-61367 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Hyper-V Information Disclosure Vulnerability <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows Hyper-V Microsoft Yes CVE-2026-61368 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.0 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 cyanbamboo and b2ahex 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Remote Desktop Client Microsoft Yes CVE-2026-61918 Out-of-bounds Read Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DNS Microsoft Yes CVE-2026-61920 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11571 11572 11923 11924 12437 12436 10816 10855 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 k0shl 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Remote Desktop Client Microsoft Yes CVE-2026-61921 Out-of-bounds Read Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Display Enhancement Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Display Enhancement Service Microsoft Yes CVE-2026-61923 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Remote Desktop Client Microsoft Yes CVE-2026-61924 Out-of-bounds Read Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-61925 Incorrect Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://infosec.exchange/@jagotu">JaGoTu</a> with <a href="https://www.dcit.cz/">DCIT, a.s.</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows USB Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Driver Microsoft Yes CVE-2026-61926 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> LC with VGCO - Future Labs 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-61927 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.1 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Hello Tampering Vulnerability <p>Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows Hello Microsoft Yes CVE-2026-61928 Cleartext Storage of Sensitive Information 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-61929 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-61930 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Anonymous <a href="https://linkedin.com/in/cybera">Amar Khatri</a> Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.1 2026-09-29T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-61932 Access of Resource Using Incompatible Type ('Type Confusion') Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12242 12243 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12242 Important 12243 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DWM Core Library Information Disclosure Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows DWM Core Library Microsoft Yes CVE-2026-61933 Out-of-bounds Read 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Bind Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-61934 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 hazard 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Defender Firewall Service Security Feature Bypass Vulnerability <p>Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This vulnerability could allow an attacker to bypass an access control mechanism that is designed to restrict a sensitive debugging interface to administrators only.</p> <p>By bypassing this check, a standard authenticated user could gain unauthorized access to functionality that is intended to be limited to highly privileged users, weakening protections that enforce administrative boundaries on debugging capabilities.</p> Windows Defender Firewall Service Microsoft Yes CVE-2026-61936 Missing Authorization 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU Amir Ahmadi (@KingAmir) <a href="https://www.z1r0.top/">z1r0</a> 1.1 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows HTTP.sys Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows HTTP.sys Microsoft Yes CVE-2026-61937 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> Younggi Park (grill66), UIUC <a href="https://www.linkedin.com/in/si-yeon-wi-b869533b4">wisi</a> <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-61938 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/h4urek">h4urek</a> and <a href="https://x.com/crispr56338851">BochengXiang</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> <a href="https://twitter.com/keyz3r0">k0shl</a> 1.2 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-08-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Winlogon Elevation of Privilege Vulnerability <p>Use after free in Winlogon allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Winlogon Microsoft Yes CVE-2026-61939 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 z1r0 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-25T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-62688 Heap-based Buffer Overflow Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely Anonymous <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://twitter.com/alexjplaskett">Alex Plaskett</a> with <a href="https://nccgroup.com/">NCC Group</a> <a href="https://x.com/heegong123">HeeChan Kim</a> with <a href="https://h4c.team/">TeamH4C</a> <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> haowei yan <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> Almir Krasniqi Anonymous <a href="https://x.com/im_whoisthatguy">Nguyen Duc Loi (@whoisthatguy)</a> with <a href="https://lab.viettelcybersecurity.com/">VCSLab</a> Killer Queen Anonymous wxz 1.5 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-09-29T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.3 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-13T07:00:00 <p>Acknowledgement Updated</p> 1.4 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Push Notifications Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Push Notifications Microsoft Yes CVE-2026-62690 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-62692 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Arjun Vasudeva with MSRC V&amp;M - Exploit Research Team 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-62693 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous <a href="https://x.com/h4urek">h4urek</a> and <a href="https://x.com/crispr_x">Bocheng Xiang</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> haowei yan 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-09-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Storage Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Microsoft Yes CVE-2026-62695 Heap-based Buffer Overflow 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> pwn2addr R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST maka with Tu Longfeng maka with Tu Longfeng AIフィジカルインターフェイス二号機 <a href="https://infosec.exchange/@ynwarcs">goodbyeselene</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-08-13T07:00:00 <p>Acknowledgement Updated</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Program Compatibility Assistant Service Microsoft Yes CVE-2026-62696 Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Anonymous yhw &amp; txz <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> yhw 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Digest Authentication Elevation of Privilege Vulnerability <p>Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Digest Authentication Microsoft Yes CVE-2026-62698 Numeric Truncation Error 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://bsky.app/profile/hexnomad.bsky.social">Erik Egsgard</a> with <a href="https://fieldeffect.com/">Field Effect</a> Microsoft Red Team with Microsoft WARP and ACS teams at Microsoft 1.1 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution Vulnerability <p>Null pointer dereference in Windows Universal Disk Format File System Driver (UDFS) allows an authorized attacker to execute code locally.</p> Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-62699 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-62700 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-62701 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 pwn2addr 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Graphics Kernel Denial of Service Vulnerability <p>Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-62702 NULL Pointer Dereference 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Denial of Service 11923 Denial of Service 11924 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 pwn2addr 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DWM Core Library Information Disclosure Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows DWM Core Library Microsoft Yes CVE-2026-62703 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous renyimen with minsight-ai.com 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Bind Filter Driver Microsoft Yes CVE-2026-62705 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/bad_jubies">Grant Hume</a> <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-19T07:00:00 <p>Corrected the CVE title from <strong>Windows Bind Filter Driver Elevation of Privilege Vulnerability</strong> to <strong>Microsoft Brokering File System Elevation of Privilege Vulnerability</strong> and updated the acknowledgement. These are informational changes only.</p> Windows Modern Device Management (MDM) Elevation of Privilege Vulnerability <p>Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Modern Device Management (MDM) Microsoft Yes CVE-2026-62707 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Pwnforr777 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-62708 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 hazard 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows GDI+ Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows GDI+ Microsoft Yes CVE-2026-62709 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Device Association Service Microsoft Yes CVE-2026-62710 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Anonymous Pwnforr777 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-62711 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-62712 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Marcin Wiazowski working with <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-62713 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://twitter.com/ranchoice">RanchoIce</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows DHCP Server Microsoft Yes CVE-2026-62714 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows DHCP Server Microsoft Yes CVE-2026-62715 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows DHCP Server Microsoft Yes CVE-2026-62716 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows Message Queuing Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Message Queuing Microsoft Yes CVE-2026-62717 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/thunderj17">Thunder_J</a> <a href="https://mylostchristmas.tistory.com/20">seung chan kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows DHCP Server Microsoft Yes CVE-2026-62718 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows Message Queuing Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Message Queuing Microsoft Yes CVE-2026-62719 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows DHCP Server Microsoft Yes CVE-2026-62720 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> User-Mode Power Service (UMPS) Microsoft Yes CVE-2026-62721 Insufficient Granularity of Access Control 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5129195 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5129195 5124008 20437 20438 Yes Security Update 10.0.26200.9457 https://support.microsoft.com/help/5129195 20437 20438 5129195 5129241 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5129241 20437 20438 Yes Security Hotpatch Update 10.0.26200.9448 https://support.microsoft.com/help/5129241 20437 20438 5129241 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5129195 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5129195 5124008 12389 12390 Yes Security Update 10.0.26100.9457 https://support.microsoft.com/help/5129195 12389 12390 5129195 5129241 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5129241 12389 12390 Yes Security Hotpatch Update 10.0.26100.9448 https://support.microsoft.com/help/5129241 12389 12390 5129241 5129194 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5129194 5124012 20853 20854 Yes Security Update 10.0.28000.2956 https://support.microsoft.com/help/5129194 20853 20854 5129194 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Prayas(Pro bear) 1.1 2026-08-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 2.0 2026-09-14T07:00:00 <p>The CVE was updated with links to security updates for Windows 11, version 26H1, 25H2, and 24H2 to address a missed fix. Microsoft recommends installing these updates as soon as possible.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Brokering File System Microsoft Yes CVE-2026-62722 Heap-based Buffer Overflow 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous <a href="https://x.com/bad_jubies">Grant Hume</a> QWangWang <a href="https://www.linkedin.com/in/pravin-choudhary-b9515b29a/">Pravin Choudhary</a> 1.2 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-17T07:00:00 <p>Corrected the CVE description and title. This is an informational change only.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Telephony Service Microsoft Yes CVE-2026-62723 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-62724 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-62725 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-62726 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Telephony Service Microsoft Yes CVE-2026-62727 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 12389 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 12389 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-62728 Time-of-check Time-of-use (TOCTOU) Race Condition Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Daejin Lee Anonymous sweetchip and Daejin Lee Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.1 2026-08-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-08-25T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Telephony Service Microsoft Yes CVE-2026-62729 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Wired AutoConfig Service Information Disclosure Vulnerability <p>Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Wired AutoConfig Service Microsoft Yes CVE-2026-62730 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 k0shl 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-62732 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-62733 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-62734 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows HTTP.sys Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows HTTP.sys Microsoft Yes CVE-2026-62735 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> Younggi Park (grill66), UIUC Siyeon Wi working with TrendAI Zero Day Initiative 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Client Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> Windows DHCP Client Microsoft Yes CVE-2026-62736 Heap-based Buffer Overflow 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-62737 Untrusted Pointer Dereference 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/kkiiiiiiiiihh">kang</a> <a href="https://www.linkedin.com/in/divyasundar16/">Divya Sundar</a> with Microsoft- MSRC V&amp;M <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> yhw &amp; txz 2.0 2026-10-13T07:00:00 <p>Acknowledgment updated.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Management Instrumentation Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Management Instrumentation Microsoft Yes CVE-2026-62738 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 41ae55e9310ff27fa6f26af4727e5590 Pwnforr777 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows HTTP.sys Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows HTTP.sys Microsoft Yes CVE-2026-62739 Heap-based Buffer Overflow Numeric Truncation Error 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> Microsoft haowei yan & xiaozun tang 1.1 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Imaging Component Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows Imaging Component Microsoft Yes CVE-2026-62740 Use of Uninitialized Resource 12155 11951 12440 21368 Information Disclosure 12155 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 21368 Important 12155 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12155 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.112.26090911 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-10-28T07:00:00 <p>Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability.</p> Windows HTTP.sys Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows HTTP.sys Microsoft Yes CVE-2026-62741 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC LC with VGCO Future Labs <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl</a> with UIUC Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. <a href="https://www.linkedin.com/in/si-yeon-wi-b869533b4">wisi</a> 1.1 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-10-07T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows DHCP Server Microsoft Yes CVE-2026-62742 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Win32k Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32K Microsoft Yes CVE-2026-62743 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows DHCP Server Microsoft Yes CVE-2026-62745 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Win32k Information Disclosure Vulnerability <p>Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32K Microsoft Yes CVE-2026-62746 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> Anonymous <a href="https://twitter.com/kkokkokye">JeongOh Kyea</a> with <a href="https://theori.io/">Theori, with Xint</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> Windows Device Association Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Device Association Service Microsoft Yes CVE-2026-62747 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 LC with VGCO - Future Labs <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> Anonymous wxz and Thanatos Tian (HKPolyU) with Diffract <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU sweetchip haowei yan & xiaozun tang Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-08-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.3 2026-08-25T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.4 2026-09-08T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.5 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Telephony Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> Windows Telephony Service Microsoft Yes CVE-2026-62748 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-62749 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows HTTP Protocol Stack Tampering Vulnerability <p>Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> Windows HTTP Protocol Stack Microsoft Yes CVE-2026-62750 Partial String Comparison 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11924 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12242 Tampering 12243 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Projected File System Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Projected File System Microsoft Yes CVE-2026-62751 Integer Overflow or Wraparound 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST Anonymous <a href="https://github.com/zeze-zeze">Zeze</a> with <a href="https://www.txone.com/">TXOne</a> Thanatos Tian (HKPolyU) &amp; wgg with Diffract 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kerberos Microsoft Yes CVE-2026-62752 Heap-based Buffer Overflow Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely Microsoft haowei yan & xiaozun tang 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows HTTP.sys Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows HTTP.sys Microsoft Yes CVE-2026-62753 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU)</a> with https://diffract-ai.com/ 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kerberos Microsoft Yes CVE-2026-62754 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-20T07:00:00 <p>Updated links to security updates. This is an informational change only.</p> Windows DHCP Client Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Client Microsoft Yes CVE-2026-62755 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Daejin Lee Anonymous Thanatos Tian (HKPolyU) with Diffract &amp; PB18 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> sweetchip <a href="https://www.z1r0.top/">z1r0</a> wxz Linzishan, Anemone and Zhiniang Peng with HUST 1.4 2026-10-14T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.3 2026-09-29T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-08-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> Windows Schannel Security Feature Bypass Vulnerability <p>Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass certificate validation during the account enrollment process.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Windows Schannel Microsoft Yes CVE-2026-62757 Improper Verification of Cryptographic Signature 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2026-62758 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-62761 Improper Link Resolution Before File Access ('Link Following') Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely WARP and ACS teams at Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kerberos Microsoft Yes CVE-2026-62766 Double Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 WARP and ACS teams at Microsoft haowei yan &amp; xiaozun tang 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-62768 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.1 2026-09-02T07:00:00 <p>Acknowledgement added. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-62769 Numeric Truncation Error Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Shell Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Shell Microsoft Yes CVE-2026-62770 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Yeonba 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-62771 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> and <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> yhw 1.1 2026-08-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-62772 Heap-based Buffer Overflow 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. yhw & txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kerberos Elevation of Privilege Vulnerability <p>Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kerberos Microsoft Yes CVE-2026-62773 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 WARP and ACS teams at Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-62774 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability <p>Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-62775 Incorrect Authorization 20853 20854 Information Disclosure 20853 Information Disclosure 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-62776 Improper Link Resolution Before File Access ('Link Following') 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows License Manager Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows License Manager Microsoft Yes CVE-2026-62777 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Lian Owen <a href="https://x.com/9_bakabaka">Bakabaka_9</a> <a href="https://github.com/9Bakabaka">Github</a> Daejin Lee sweetchip yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> 1.2 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows DNS Elevation of Privilege Vulnerability <p>Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DNS Microsoft Yes CVE-2026-62778 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Schannel Elevation of Privilege Vulnerability <p>Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Schannel Microsoft Yes CVE-2026-62779 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-62780 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous Owen McCullough with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> RPC Runtime Library Remote Code Execution Vulnerability <p>Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> RPC Runtime Microsoft Yes CVE-2026-62781 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows SMB Client Information Disclosure Vulnerability <p>Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows SMB Client Microsoft Yes CVE-2026-62782 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Remote Access Connection Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2026-62783 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 pwnky 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> Microsoft Local Security Authority Server (lsasrv) Microsoft Yes CVE-2026-62784 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 haowei yan &amp; xiaozun tang 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows LDAP - Lightweight Directory Access Protocol Microsoft Yes CVE-2026-62785 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows Win32K Microsoft Yes CVE-2026-62786 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Use after free in Windows DNS allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows DNS Microsoft Yes CVE-2026-62787 Use After Free 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Kernel Microsoft Yes CVE-2026-62788 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Owen McCullough with Microsoft Anonymous Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. sweetchip 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows SMBv3 Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> Windows SMB Server Microsoft Yes CVE-2026-62790 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows TCP/IP Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> Windows TCP/IP Microsoft Yes CVE-2026-62792 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view heap memory from a privileged process running on the server.</p> Windows NTFS Microsoft Yes CVE-2026-62793 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vulnerability <p>Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Windows LDAP - Lightweight Directory Access Protocol Microsoft Yes CVE-2026-62795 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows NTFS Microsoft Yes CVE-2026-62796 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-62797 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract 1.0 2026-08-11T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is one byte of kernel memory could be leaked back to the attacker.</p> Windows Win32K Microsoft Yes CVE-2026-62798 Untrusted Pointer Dereference 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows SMB Client Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows SMB Client Microsoft Yes CVE-2026-62799 Heap-based Buffer Overflow 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 yhw &amp; txz 1.1 2026-09-11T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows SMBv3 Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> Windows SMB Server Microsoft Yes CVE-2026-62800 Heap-based Buffer Overflow Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely <a href="https://x.com/zeifan">Nafiez</a> with <a href="https://zeifan.my/">NLab Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-62803 Improper Link Resolution Before File Access ('Link Following') 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rutuja Shirali with Microsoft 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-62807 Improper Link Resolution Before File Access ('Link Following') 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rutuja Shirali with Microsoft 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows HTTP.sys Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows HTTP.sys Microsoft Yes CVE-2026-62811 Heap-based Buffer Overflow 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Dragana Damjanovic with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-62812 Improper Link Resolution Before File Access ('Link Following') 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rutuja Shirali with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows DHCP Server Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability includes unauthorized access to the file system, specifically file path information.</p> Windows DHCP Server Microsoft Yes CVE-2026-62814 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 12437 Information Disclosure 12436 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Howard McGreehan with MSRC V&amp;M Linzishan &amp; Anemone &amp; Zhiniang Peng (HUST) 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft QUIC Remote Code Execution Vulnerability <p>Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Microsoft QUIC Microsoft Yes CVE-2026-62815 Use After Free 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Critical 11923 Critical 11924 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 pwn2addr Damian Regulski Quac Tran <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-03T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Reliable Multicast Transport Driver (RMCAST) Microsoft Yes CVE-2026-62816 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Windows DNS Microsoft Yes CVE-2026-62817 Out-of-bounds Write 11571 11572 11923 11924 12437 12436 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability <p>Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> Active Directory Certificate Services (AD CS) Microsoft Yes CVE-2026-62818 Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability <p>Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-62819 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 AIフィジカルインターフェイス二号機 <a href="https://x.com/m4x_1997">Aobo Wang</a> Pwnforr777 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DNS Microsoft Yes CVE-2026-62820 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11571 11572 11923 11924 12437 12436 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> Linzishan 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows GDI+ Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Windows GDI+ Microsoft Yes CVE-2026-62822 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DHCP Server Microsoft Yes CVE-2026-62823 Heap-based Buffer Overflow 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://x.com/marcosd4h">Marcos Oviedo with Deep Extract Harness</a> Linzishan & Anemone & Zhiniang Peng (HUST) 1.1 2026-08-31T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Remote Desktop Client Microsoft Yes CVE-2026-62824 Stack-based Buffer Overflow 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Philemon Favrod with Microsoft Raymond Reskusich with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Elevation of Privilege Vulnerability <p>Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-62827 Improper Authentication 10950 11585 11961 Elevation of Privilege 10950 Elevation of Privilege 11585 Elevation of Privilege 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Ivan Vagunin 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-62829 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11585 11961 Spoofing 11585 Spoofing 11961 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure SRE Agent Elevation of Privilege Vulnerability <p>Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SRE Agent Microsoft No CVE-2026-62830 Missing Authorization 21304 Elevation of Privilege 21304 Critical 21304 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21304 <a href="https://twitter.com/wtm_offensi">wtm</a> with <a href="https://offensi.com/">Offensi</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> Windows User Profile Service Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ADMINISTRATOR privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker who has credentials for another local account could run a specially crafted application to load another user's registry hive. Successful exploitation could allow the attacker to access or modify another user's data and gain administrator privileges. User interaction is not required.</p> Windows User Profile Service Microsoft Yes CVE-2026-62832 Improper Link Resolution Before File Access ('Link Following') Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely Anonymous Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Data Factory Elevation of Privilege Vulnerability <p>Improper verification of cryptographic signature in Azure Data Factory allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Data Factory Microsoft No CVE-2026-62834 Improper Verification of Cryptographic Signature 12040 Elevation of Privilege 12040 Critical 12040 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12040 Kieran Bloomfield with Microsoft Red Team 1.0 2026-08-20T07:00:00 <p>Information published.</p> Azure SQL Managed Instance Elevation of Privilege Vulnerability <p>Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SQL Managed Instance Microsoft No CVE-2026-62836 Improper Restriction of Communication Channel to Intended Endpoints 21591 Elevation of Privilege 21591 Critical 21591 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.7 7.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21591 <a href="https://twitter.com/wtm_offensi">wtm</a> with <a href="https://offensi.com/">Offensi</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Information Disclosure Vulnerability <p>Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-62837 Relative Path Traversal 10950 11585 11961 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://www.linkedin.com/in/rafaellresende/">Rafael Resende</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of NetNTLMv2 hashes.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-62839 Insufficiently Protected Credentials 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-62842 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Entra ID Spoofing Vulnerability <p>Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Entra ID Microsoft No CVE-2026-62869 Insufficient Verification of Data Authenticity 12383 Spoofing 12383 Critical 12383 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12383 Anonymous 1.0 2026-08-06T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user trigger the payload in the application.</p> .NET Microsoft Yes CVE-2026-62871 Out-of-bounds Write Heap-based Buffer Overflow 12414 12434 21681 16767 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 21681 Remote Code Execution 16767 Important 12414 Important 12434 Important 21681 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21681 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12434 5122105 21681 Security Update 18.8.3 21681 16767 Security Update 17.14.38 16767 kai63001 <a href="https://x.com/ky0tofu">Ky0toFu</a> 41ae55e9310ff27fa6f26af4727e5590 nono 2.0 2026-08-13T07:00:00 <p>Removed Linux and macOS products from the Affected Software table. This is an informational change only.</p> 2.1 2026-09-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Framework Elevation of Privilege Vulnerability <p>Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> .NET Framework Microsoft Yes CVE-2026-62872 Incorrect Authorization 11650-10855 11650-10853 11650-10816 11676-11569 11650-10483 11650-10543 11676-11568 11676-11930 11676-12097 11676-11929 11676-11931 11676-12099 11677-11568 11723-10853 11723-10816 11723-10855 11863-10378 11863-10379 11863-10543 12078-20853 12079-11923 12079-11924 12079-12097 12079-12437 12079-12098 12079-12099 12079-12436 12079-12243 12079-20438 12079-12242 12079-12389 12079-12390 2472-20853 2472-20854 2472-10543 2472-10483 2472-10378 2472-10379 11650-10852 11650-10379 11650-10378 11676-11571 11676-11572 11676-11923 11676-11924 11676-12098 11677-11569 11677-11571 11677-11572 11723-10852 11863-10483 12078-20854 12079-11930 12079-11929 12079-11931 12079-20437 Elevation of Privilege 11650-10855 Elevation of Privilege 11650-10853 Elevation of Privilege 11650-10816 Elevation of Privilege 11676-11569 Elevation of Privilege 11650-10483 Elevation of Privilege 11650-10543 Elevation of Privilege 11676-11568 Elevation of Privilege 11676-11930 Elevation of Privilege 11676-12097 Elevation of Privilege 11676-11929 Elevation of Privilege 11676-11931 Elevation of Privilege 11676-12099 Elevation of Privilege 11677-11568 Elevation of Privilege 11723-10853 Elevation of Privilege 11723-10816 Elevation of Privilege 11723-10855 Elevation of Privilege 11863-10378 Elevation of Privilege 11863-10379 Elevation of Privilege 11863-10543 Elevation of Privilege 12078-20853 Elevation of Privilege 12079-11923 Elevation of Privilege 12079-11924 Elevation of Privilege 12079-12097 Elevation of Privilege 12079-12437 Elevation of Privilege 12079-12098 Elevation of Privilege 12079-12099 Elevation of Privilege 12079-12436 Elevation of Privilege 12079-12243 Elevation of Privilege 12079-20438 Elevation of Privilege 12079-12242 Elevation of Privilege 12079-12389 Elevation of Privilege 12079-12390 Elevation of Privilege 2472-20853 Elevation of Privilege 2472-20854 Elevation of Privilege 2472-10543 Elevation of Privilege 2472-10483 Elevation of Privilege 2472-10378 Elevation of Privilege 2472-10379 Elevation of Privilege 11650-10852 Elevation of Privilege 11650-10379 Elevation of Privilege 11650-10378 Elevation of Privilege 11676-11571 Elevation of Privilege 11676-11572 Elevation of Privilege 11676-11923 Elevation of Privilege 11676-11924 Elevation of Privilege 11676-12098 Elevation of Privilege 11677-11569 Elevation of Privilege 11677-11571 Elevation of Privilege 11677-11572 Elevation of Privilege 11723-10852 Elevation of Privilege 11863-10483 Elevation of Privilege 12078-20854 Elevation of Privilege 12079-11930 Elevation of Privilege 12079-11929 Elevation of Privilege 12079-11931 Elevation of Privilege 12079-20437 Important 11650-10855 Important 11650-10853 Important 11650-10816 Important 11676-11569 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11930 Important 11676-12097 Important 11676-11929 Important 11676-11931 Important 11676-12099 Important 11677-11568 Important 11723-10853 Important 11723-10816 Important 11723-10855 Important 11863-10378 Important 11863-10379 Important 11863-10543 Important 12078-20853 Important 12079-11923 Important 12079-11924 Important 12079-12097 Important 12079-12437 Important 12079-12098 Important 12079-12099 Important 12079-12436 Important 12079-12243 Important 12079-20438 Important 12079-12242 Important 12079-12389 Important 12079-12390 Important 2472-20853 Important 2472-20854 Important 2472-10543 Important 2472-10483 Important 2472-10378 Important 2472-10379 Important 11650-10852 Important 11650-10379 Important 11650-10378 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-12098 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11723-10852 Important 11863-10483 Important 12078-20854 Important 12079-11930 Important 12079-11929 Important 12079-11931 Important 12079-20437 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 5120702 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120702 11650-10855 11650-10853 11650-10816 11650-10852 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120702 11650-10855 11650-10853 11650-10816 11650-10852 5120702 5120703 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120703 11676-11569 11676-11568 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 https://support.microsoft.com/help/5120703 11676-11569 11676-11568 11676-11571 11676-11572 5120703 5120706 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120706 11650-10483 11650-10543 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120706 11650-10483 11650-10543 5120706 5120701 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120701 11676-11930 11676-12097 11676-11929 11676-11931 11676-12099 11676-12098 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0 https://support.microsoft.com/help/5120701 11676-11930 11676-12097 11676-11929 11676-11931 11676-12099 11676-12098 5120701 5120698 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120698 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 https://support.microsoft.com/help/5120698 11677-11568 11677-11569 11677-11571 11677-11572 5120698 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 11723-10853 11723-10816 11723-10855 11723-10852 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0 https://support.microsoft.com/help/5120418 11723-10853 11723-10816 11723-10855 11723-10852 5120418 5120699 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120699 11863-10378 11863-10379 Maybe Security Update 4.7.4144.0 https://support.microsoft.com/help/5120699 11863-10378 11863-10379 5120699 5120700 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120700 11863-10543 11863-10483 Maybe Security Update 4.7.4144.0 https://support.microsoft.com/help/5120700 11863-10543 11863-10483 5120700 5120711 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120711 12078-20853 12078-20854 Maybe Security Update 4.8.9344.0 https://support.microsoft.com/help/5120711 12078-20853 12078-20854 5120711 5120714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120714 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120714 12079-11923 12079-11924 5120714 5120709 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120709 12079-12097 12079-12098 12079-12099 12079-11930 12079-11929 12079-11931 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120709 12079-12097 12079-12098 12079-12099 12079-11930 12079-11929 12079-11931 5120709 5120708 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120708 12079-12437 12079-12436 12079-20438 12079-20437 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9344.0 https://support.microsoft.com/help/5120708 12079-12437 12079-12436 12079-20438 12079-20437 5120708 5120713 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120713 12079-12243 12079-12242 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120713 12079-12243 12079-12242 5120713 5120710 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120710 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120710 12079-12389 12079-12390 5120710 5120747 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120747 2472-20853 2472-20854 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 https://support.microsoft.com/help/5120747 2472-20853 2472-20854 5120747 5120695 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120695 2472-10543 2472-10483 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 https://support.microsoft.com/help/5120695 2472-10543 2472-10483 5120695 5120716 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120716 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 https://support.microsoft.com/help/5120716 2472-10378 2472-10379 5120716 5120704 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120704 11650-10379 11650-10378 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120704 11650-10379 11650-10378 5120704 5120705 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120705 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0 https://support.microsoft.com/help/5120705 11676-11923 11676-11924 5120705 <a href="https://twitter.com/irsdl">Soroush Dalili</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft 365 Admin Center Elevation of Privilege Vulnerability <p>Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft 365 Admin Center Microsoft No CVE-2026-62873 Improper Verification of Cryptographic Signature 21622 Elevation of Privilege 21622 Critical 21622 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21622 1.0 2026-08-06T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-62876 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Byzero with Kunlun Lab & Zhiniang Peng with HUST <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> and Jmini Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-62877 Stack-based Buffer Overflow 12155 11951 12440 21368 Remote Code Execution 12155 Remote Code Execution 11951 Remote Code Execution 12440 Remote Code Execution 21368 Important 12155 Important 11951 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12155 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://support.microsoft.com/en-us/microsoft-365 12155 Security Update 16.0.20430.20000 https://support.microsoft.com/en-us/microsoft-365 12155 Release Notes Release Notes https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Security Update 16.112.26090911 https://learn.microsoft.com/en-us/officeupdates/release-notes-office-for-mac 11951 12440 21368 Release Notes Anonymous Byzero with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-10-28T07:00:00 <p>Added supported editions of Microsoft Office to the Security Updates table because they are affected by this vulnerability. Microsoft recommends that customers running any of these editions of Office install the latest security updates to be fully protected from this vulnerability.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DNS Microsoft Yes CVE-2026-62878 Stack-based Buffer Overflow 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-62880 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> and <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> Jmini Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract 1.1 2026-09-02T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-62881 Numeric Truncation Error Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Outlook Spoofing Vulnerability <p>Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-62882 Insufficiently Protected Credentials 11573 11574 11762 11763 11952 11953 12420 12421 10765 10766 Spoofing 11573 Spoofing 11574 Spoofing 11762 Spoofing 11763 Spoofing 11952 Spoofing 11953 Spoofing 12420 Spoofing 12421 Spoofing 10765 Spoofing 10766 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10765 Important 10766 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11573 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11574 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11762 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11763 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11952 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11953 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12420 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12421 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10765 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10766 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002755 https://www.microsoft.com/en-us/download/details.aspx?id=108768 10765 10766 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002755 10765 10766 5002755 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-62883 Numeric Truncation Error Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-62885 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user trigger the payload in the application.</p> .NET Microsoft Yes CVE-2026-62886 Integer Overflow or Wraparound Heap-based Buffer Overflow 2472-10378 11863-10378 11650-10378 11650-10483 11650-10816 11723-11571 11676-11571 12079-11923 11677-11568 11677-11570 11676-11568 11676-11570 11676-11569 11676-11929 12079-11929 12079-11931 12079-12099 12079-12098 12079-20437 2472-20854 2472-20853 12078-20854 12078-20853 2472-10483 11863-10483 11723-10816 11676-11923 12079-12436 11723-10852 11723-10853 11650-10852 11650-10853 11677-11569 11676-11930 11676-11931 12079-11930 11676-12099 11676-12098 11676-12097 12079-12097 12079-12242 12079-12243 12079-12389 12079-12390 12079-20438 21681 2472-21987 11723-22028 11677-22029 11676-22029 11676-21983 11676-21984 12079-21983 12079-21984 12079-21985 12079-21986 12079-21988 12079-21989 Elevation of Privilege 2472-10378 Elevation of Privilege 11863-10378 Elevation of Privilege 11650-10378 Elevation of Privilege 11650-10483 Elevation of Privilege 11650-10816 Elevation of Privilege 11723-11571 Elevation of Privilege 11676-11571 Elevation of Privilege 12079-11923 Elevation of Privilege 11677-11568 Elevation of Privilege 11677-11570 Elevation of Privilege 11676-11568 Elevation of Privilege 11676-11570 Elevation of Privilege 11676-11569 Elevation of Privilege 11676-11929 Elevation of Privilege 12079-11929 Elevation of Privilege 12079-11931 Elevation of Privilege 12079-12099 Elevation of Privilege 12079-12098 Elevation of Privilege 12079-20437 Elevation of Privilege 2472-20854 Elevation of Privilege 2472-20853 Elevation of Privilege 12078-20854 Elevation of Privilege 12078-20853 Elevation of Privilege 2472-10483 Elevation of Privilege 11863-10483 Elevation of Privilege 11723-10816 Elevation of Privilege 11676-11923 Elevation of Privilege 12079-12436 Elevation of Privilege 11723-10852 Elevation of Privilege 11723-10853 Elevation of Privilege 11650-10852 Elevation of Privilege 11650-10853 Elevation of Privilege 11677-11569 Elevation of Privilege 11676-11930 Elevation of Privilege 11676-11931 Elevation of Privilege 12079-11930 Elevation of Privilege 11676-12099 Elevation of Privilege 11676-12098 Elevation of Privilege 11676-12097 Elevation of Privilege 12079-12097 Elevation of Privilege 12079-12242 Elevation of Privilege 12079-12243 Elevation of Privilege 12079-12389 Elevation of Privilege 12079-12390 Elevation of Privilege 12079-20438 Elevation of Privilege 21681 Elevation of Privilege 2472-21987 Elevation of Privilege 11723-22028 Elevation of Privilege 11677-22029 Elevation of Privilege 11676-22029 Elevation of Privilege 11676-21983 Elevation of Privilege 11676-21984 Elevation of Privilege 12079-21983 Elevation of Privilege 12079-21984 Elevation of Privilege 12079-21985 Elevation of Privilege 12079-21986 Elevation of Privilege 12079-21988 Elevation of Privilege 12079-21989 Important 2472-10378 Important 11863-10378 Important 11650-10378 Important 11650-10483 Important 11650-10816 Important 11723-11571 Important 11676-11571 Important 12079-11923 Important 11677-11568 Important 11677-11570 Important 11676-11568 Important 11676-11570 Important 11676-11569 Important 11676-11929 Important 12079-11929 Important 12079-11931 Important 12079-12099 Important 12079-12098 Important 12079-20437 Important 2472-20854 Important 2472-20853 Important 12078-20854 Important 12078-20853 Important 2472-10483 Important 11863-10483 Important 11723-10816 Important 11676-11923 Important 12079-12436 Important 11723-10852 Important 11723-10853 Important 11650-10852 Important 11650-10853 Important 11677-11569 Important 11676-11930 Important 11676-11931 Important 12079-11930 Important 11676-12099 Important 11676-12098 Important 11676-12097 Important 12079-12097 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12079-20438 Important 21681 Important 2472-21987 Important 11723-22028 Important 11677-22029 Important 11676-22029 Important 11676-21983 Important 11676-21984 Important 12079-21983 Important 12079-21984 Important 12079-21985 Important 12079-21986 Important 12079-21988 Important 12079-21989 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21681 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-21987 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-22028 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-22029 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-22029 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21983 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-21984 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21983 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21984 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21985 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21986 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21988 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-21989 5127660 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127660 2472-10378 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127660 2472-10378 5127660 5126044 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126044 11863-10378 Maybe Security Update 4.7.4145.0 https://support.microsoft.com/help/5126044 11863-10378 5126044 5126049 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126049 11650-10378 Maybe Security Update 4.8.4806.0 https://support.microsoft.com/help/5126049 11650-10378 5126049 5126051 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126051 11650-10483 Maybe Security Update 4.8.4806.0 https://support.microsoft.com/help/5126051 11650-10483 5126051 5126047 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126047 11650-10816 11650-10852 11650-10853 Maybe Security Update 4.8.4806.0 https://support.microsoft.com/help/5126047 11650-10816 11650-10852 11650-10853 5126047 5127666 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127666 11723-11571 11677-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.7.4150.0 https://support.microsoft.com/help/5127666 11723-11571 11677-22029 5127666 5127685 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127685 11676-11571 11676-22029 Maybe Security Update 2.0.50727.9073 AND 3.0.30729.9070 AND 4.8.4811.0 https://support.microsoft.com/help/5127685 11676-11571 11676-22029 5127685 5127693 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127693 12079-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127693 12079-11923 5127693 5126043 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126043 11677-11568 11677-11570 11677-11569 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4145.0 https://support.microsoft.com/help/5126043 11677-11568 11677-11570 11677-11569 5126043 5126421 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126421 11676-11568 11676-11570 11676-11569 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4806.0 https://support.microsoft.com/help/5126421 11676-11568 11676-11570 11676-11569 5126421 5126046 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126046 11676-11929 11676-11930 11676-11931 11676-12099 11676-12098 11676-12097 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4806.0 https://support.microsoft.com/help/5126046 11676-11929 11676-11930 11676-11931 11676-12099 11676-12098 11676-12097 5126046 5126421 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126421 12079-11929 12079-11931 12079-12099 12079-12098 12079-11930 12079-12097 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9346.0 https://support.microsoft.com/help/5126421 12079-11929 12079-11931 12079-12099 12079-12098 12079-11930 12079-12097 5126421 5126052 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126052 12079-20437 12079-12389 12079-12390 12079-20438 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0 https://support.microsoft.com/help/5126052 12079-20437 12079-12389 12079-12390 12079-20438 5126052 5120747 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 https://support.microsoft.com/help/5120747 2472-20854 2472-20853 5120747 5126053 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126053 12078-20854 12078-20853 Maybe Security Update 4.8.9347.0 https://support.microsoft.com/help/5126053 12078-20854 12078-20853 5126053 5127664 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127664 2472-10483 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 https://support.microsoft.com/help/5127664 2472-10483 5127664 5126045 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126045 11863-10483 Maybe Security Update 4.7.4145.0 https://support.microsoft.com/help/5126045 11863-10483 5126045 5126868 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126868 11723-10816 11723-22028 Maybe Security Update 2.0.50727.8987 AND 3.0.30729.8982 AND 4.7.4150.0 https://support.microsoft.com/help/5126868 11723-10816 11723-22028 5126868 5126868 https://support.microsoft.com/help/5126868 11723-10816 11723-22028 5127687 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127687 11676-11923 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127687 11676-11923 5127687 5127690 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127690 12079-12436 12079-21985 12079-21986 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127690 12079-12436 12079-21985 12079-21986 5127690 5123099 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5123099 11723-10852 11723-10853 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4145.0 https://support.microsoft.com/help/5123099 11723-10852 11723-10853 5123099 5123099 https://support.microsoft.com/help/5123099 11723-10852 11723-10853 5126424 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5126424 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9347.0 https://support.microsoft.com/help/5126424 12079-12242 12079-12243 5126424 21681 Security Update 18.8.3 21681 5127696 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127696 2472-21987 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 https://support.microsoft.com/help/5127696 2472-21987 5127696 5127683 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127683 11676-21983 11676-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.4811.0 https://support.microsoft.com/help/5127683 11676-21983 11676-21984 5127683 5127689 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127689 12079-21983 12079-21984 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127689 12079-21983 12079-21984 5127689 5127692 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127692 12079-21988 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.9363.0 https://support.microsoft.com/help/5127692 12079-21988 5127692 5127694 https://www.catalog.update.microsoft.com/Search.aspx?q=KB5127694 12079-21989 Maybe Security Update 2.0.50727.9188 AND 3.0.30729.9171 AND 4.8.10008.0 https://support.microsoft.com/help/5127694 12079-21989 5127694 <a href="https://x.com/ky0tofu">Ky0toFu</a> 41ae55e9310ff27fa6f26af4727e5590 kai63001 zpbrent Ngoc Hieu from Vinfast s3zer0 2.0 2026-08-13T07:00:00 <p>Removed Linux and macOS products from the Affected Software table. This is an informational change only.</p> 2.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows NTFS Microsoft Yes CVE-2026-62887 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) & wgg & @2st__ with Diffract 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-62888 Use After Free 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 yhw & txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability <p>Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Secure Socket Tunneling Protocol (SSTP) Microsoft Yes CVE-2026-62889 Double Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-31T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows GDI+ Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows GDI+ Microsoft Yes CVE-2026-62890 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous Yongha Lee 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Capability Access Management Service (camsvc) Elevation of Privilege Vulnerability <p>Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Capability Access Management Service (camsvc) Microsoft Yes CVE-2026-62892 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 k0shl <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Deployment Services TFTP Server Remote Code Execution Vulnerability <p>Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Deployment Services Microsoft Yes CVE-2026-62893 Use After Free 11571 11572 11923 11924 12437 12436 10816 10855 10378 10379 10483 10543 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Nikolai Skliarenko of TrendAI Research 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows DWM Core Library Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DWM Core Library Microsoft Yes CVE-2026-62894 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Varun Goel 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Teams Elevation of Privilege Vulnerability <p>Improper authentication in Microsoft Teams allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Teams Microsoft No CVE-2026-62896 Improper Authentication 11686 Elevation of Privilege 11686 Critical 11686 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11686 Henrique Pereira with Microsoft 1.0 2026-08-06T07:00:00 <p>Information published.</p> .NET Framework Remote Code Execution Vulnerability <p>Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> .NET Framework Microsoft Yes CVE-2026-62897 Integer Overflow or Wraparound 12078-20854 2472-20854 12078-20853 20837 2472-20853 12414 12434 21681 16767 11676-11570 11677-11570 Remote Code Execution 12078-20854 Remote Code Execution 2472-20854 Remote Code Execution 12078-20853 Remote Code Execution 20837 Remote Code Execution 2472-20853 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 21681 Remote Code Execution 16767 Remote Code Execution 11676-11570 Remote Code Execution 11677-11570 Important 12078-20854 Important 2472-20854 Important 12078-20853 Important 20837 Important 2472-20853 Important 12414 Important 12434 Important 21681 Important 16767 Important 11676-11570 Important 11677-11570 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21681 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11570 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11570 5120711 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120711 12078-20854 12078-20853 Maybe Security Update 4.8.9344.0 https://support.microsoft.com/help/5120711 12078-20854 12078-20853 5120711 5120747 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120747 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 https://support.microsoft.com/help/5120747 2472-20854 2472-20853 5120747 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20837 5122106 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12434 5122105 21681 Security Update 18.8.3 21681 16767 Security Update 17.14.38 16767 5120703 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120703 11676-11570 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 https://support.microsoft.com/help/5120703 11676-11570 5120703 5120698 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120698 11677-11570 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 https://support.microsoft.com/help/5120698 11677-11570 5120698 <a href="https://x.com/ky0tofu">Ky0toFu</a> 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-13T07:00:00 <p>Removed Linux and macOS products from the Affected Software table. This is an informational change only.</p> Microsoft QUIC Information Disclosure Vulnerability <p>Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft QUIC Microsoft Yes CVE-2026-62898 Use After Free 20837 16767 21681 12434 12414 Information Disclosure 20837 Information Disclosure 16767 Information Disclosure 21681 Information Disclosure 12434 Information Disclosure 12414 Important 20837 Important 16767 Important 21681 Important 12434 Important 12414 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21681 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20837 5122106 16767 Security Update 17.14.38 16767 21681 Security Update 18.8.3 21681 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12434 5122105 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 5122104 Quac Tran 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-13T07:00:00 <p>Removed Linux and macOS products from the Affected Software table. This is an informational change only.</p> .NET Security Feature Bypass Vulnerability <p>Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could smuggle another HTTP request and bypass front-end security controls or hijack other users' credentials.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires that the target system be set up in a specific manner and the attacker to have knowledge of that setup.</p> .NET Microsoft Yes CVE-2026-62899 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 20838 20839 12414 12415 12416 12432 12433 12434 16767 21681 Security Feature Bypass 20838 Security Feature Bypass 20839 Security Feature Bypass 12414 Security Feature Bypass 12415 Security Feature Bypass 12416 Security Feature Bypass 12432 Security Feature Bypass 12433 Security Feature Bypass 12434 Security Feature Bypass 16767 Security Feature Bypass 21681 Important 20838 Important 20839 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Important 16767 Important 21681 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20838 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20839 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12415 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12416 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12432 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12433 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21681 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20838 20839 5122106 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 12415 12416 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12432 12433 12434 5122105 16767 Security Update 17.14.38 16767 21681 Security Update 18.8.3 21681 Miha Zupan with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Information Disclosure Vulnerability <p>Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires that the target system be set up in a specific manner and the attacker to have knowledge of that setup.</p> .NET Microsoft Yes CVE-2026-62900 Improper Removal of Sensitive Information Before Storage or Transfer 21681 20838 20839 12414 12415 12416 12432 12433 12434 16767 Information Disclosure 21681 Information Disclosure 20838 Information Disclosure 20839 Information Disclosure 12414 Information Disclosure 12415 Information Disclosure 12416 Information Disclosure 12432 Information Disclosure 12433 Information Disclosure 12434 Information Disclosure 16767 Important 21681 Important 20838 Important 20839 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21681 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20838 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20839 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12415 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12416 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12432 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12433 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 21681 Security Update 18.8.3 21681 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20838 20839 5122106 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 12415 12416 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12432 12433 12434 5122105 16767 Security Update 17.14.38 16767 Ivan Demchuk 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-62901 Unchecked Input for Loop Condition 21681 20838 20839 12414 12415 12416 12432 12433 12434 16767 Denial of Service 21681 Denial of Service 20838 Denial of Service 20839 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 12432 Denial of Service 12433 Denial of Service 12434 Denial of Service 16767 Important 21681 Important 20838 Important 20839 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21681 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 21681 Security Update 18.8.3 21681 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20838 20839 5122106 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 12415 12416 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12432 12433 12434 5122105 16767 Security Update 17.14.38 16767 hamayanhamayan <a href="https://x.com/kookiz/">Kevin Gosse</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Information Disclosure Vulnerability <p>Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of NTLM hashes.</p> .NET Microsoft Yes CVE-2026-62902 Inclusion of Functionality from Untrusted Control Sphere Protection Mechanism Failure Server-Side Request Forgery (SSRF) 12414 12434 16767 21681 Information Disclosure 12414 Information Disclosure 12434 Information Disclosure 16767 Information Disclosure 21681 Important 12414 Important 12434 Important 16767 Important 21681 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12414 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12434 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16767 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21681 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12434 5122105 16767 Security Update 17.14.38 16767 21681 Security Update 18.8.3 21681 <a href="https://x.com/ky0tofu">Ky0toFu</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.0 2026-08-13T07:00:00 <p>Removed Linux and macOS products from the Affected Software table. This is an informational change only.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability <p>Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The issue could result in exposure of a small amount of internal system data, such as an internal identifier value. The information is limited in scope and does not involve user content or personal data.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-62904 Incorrect Authorization 11815 12480 21776 11966 21777 21955 Information Disclosure 11815 Information Disclosure 12480 Information Disclosure 21776 Information Disclosure 11966 Information Disclosure 21777 Information Disclosure 21955 Moderate 11815 Moderate 12480 Moderate 21776 Moderate 11966 Moderate 21777 Moderate 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11815 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12480 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21776 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11966 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21955 Release Notes 11815 12480 21776 11966 21777 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11815 12480 21776 11966 21777 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://www.linkedin.com/in/jattawatt-buranasant-891783107/">Jattawatt Buranasant</a> 1.0 2026-08-28T07:00:00 <p>Information published.</p> Windows Backup Engine Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Backup Engine Microsoft Yes CVE-2026-62908 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Elevation of Privilege Vulnerability <p>Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires that the target system be set up in a specific manner and the attacker to have knowledge of that setup.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ROOT privileges.</p> .NET Microsoft Yes CVE-2026-62909 Unchecked Return Value 20839 12415 12432 21681 20838 20837 12414 12416 12433 16767 12434 Elevation of Privilege 20839 Elevation of Privilege 12415 Elevation of Privilege 12432 Elevation of Privilege 21681 Elevation of Privilege 20838 Elevation of Privilege 20837 Elevation of Privilege 12414 Elevation of Privilege 12416 Elevation of Privilege 12433 Elevation of Privilege 16767 Elevation of Privilege 12434 Important 20839 Important 12415 Important 12432 Important 21681 Important 20838 Important 20837 Important 12414 Important 12416 Important 12433 Important 16767 Important 12434 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21681 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 20837 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20839 20838 20837 5122106 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12415 12414 12416 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12415 12414 12416 5122104 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12432 12433 12434 5122105 21681 Security Update 18.8.3 21681 16767 Security Update 17.14.38 16767 <a href="https://x.com/kookiz/">Kevin Gosse</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-62910 Improper Control of Resource Identifiers ('Resource Injection') 16792 12039 12502 12293 Elevation of Privilege 16792 Elevation of Privilege 12039 Elevation of Privilege 12502 Elevation of Privilege 12293 Important 16792 Important 12039 Important 12502 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 <a href="https://www.linkedin.com/in/yannic-r-28b446158/">Yannic R&#246;cken</a> with <a href="https://indeno.at/">Indeno GmbH</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would be able to take over the mailboxes of all Exchange users, attackers can send emails, read emails, download attachments.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-62911 Authentication Bypass by Capture-replay 12039 16792 12502 12293 Elevation of Privilege 12039 Elevation of Privilege 16792 Elevation of Privilege 12502 Elevation of Privilege 12293 Critical 12039 Critical 16792 Critical 12502 Critical 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 <a href="https://linkedin.com/in/dr-sr">Dan Reynolds</a> with MSRC Vulnerabilities &amp; Mitigations Orange Tsai (@orange_8361) of DEVCORE Research Team working with TrendAI Zero Day Initiative 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Exchange Server Denial of Service Vulnerability <p>Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-62912 Deserialization of Untrusted Data 16792 12502 12039 12293 Denial of Service 16792 Denial of Service 12502 Denial of Service 12039 Denial of Service 12293 Important 16792 Important 12502 Important 12039 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16792 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12502 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12039 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12293 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 ECooper with Aretiq.AI ECooper with Aretiq.AI 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Exchange Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-62913 Heap-based Buffer Overflow 12039 16792 12502 12293 Remote Code Execution 12039 Remote Code Execution 16792 Remote Code Execution 12502 Remote Code Execution 12293 Important 12039 Important 16792 Important 12502 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 1a5e1a108c0c83f9af1249ae700d6694 <a href="https://x.com/xamroot">Max Toor</a> with Microsoft <a href="https://www.linkedin.com/in/chrysostomos-manousis/">Chrysostomos Manousis</a> with <a href="https://www.mindthehack.ai/">Mind The Hack</a> <a href="https://github.com/hackerga2101">CN</a> with <a href="https://github.com/hackerga2101">no</a> 1.3 2026-10-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-08-13T07:00:00 <p>Added acknowledgements. This is an informational change only.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Exchange Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H). What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could craft a payload allowing them to access sensitive user data, which could result in unauthorized access to the victim's account or compromise of other confidential information.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-62914 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 12039 16792 12502 12293 Spoofing 12039 Spoofing 16792 Spoofing 12502 Spoofing 12293 Important 12039 Important 16792 Important 12502 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12039 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 16792 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12502 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12293 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Exchange Server Security Feature Bypass Vulnerability <p>Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An authenticated attacker who successfully exploited this vulnerability could bypass a role-based restriction that is intended to control which users are allowed to install mail add-ins. By bypassing this control, a user could install an add-in that requests elevated mailbox permissions that an administrator's policy was meant to prevent.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-62915 Missing Authorization 12039 16792 12502 12293 Security Feature Bypass 12039 Security Feature Bypass 16792 Security Feature Bypass 12502 Security Feature Bypass 12293 Important 12039 Important 16792 Important 12502 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12039 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 16792 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12502 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12293 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 <a href="https://www.linkedin.com/in/navaponpremkasem/">71C4</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-62917 Improper Input Validation 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Teams Spoofing Vulnerability <p>Improper verification of cryptographic signature in Microsoft Teams allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Teams Microsoft No CVE-2026-62918 Improper Verification of Cryptographic Signature 11686 Spoofing 11686 Critical 11686 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11686 <a href="https://ca.linkedin.com/in/vaibhavikalgutkar">Vaibhavi Kalgutkar</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Microsoft Planetary Computer Pro allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Planetary Computer Pro Microsoft No CVE-2026-63508 Missing Authentication for Critical Function 21305 Elevation of Privilege 21305 Critical 21305 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 21305 Noa Royzman with Microsoft Michal Kamensky with Microsoft 1.0 2026-08-06T07:00:00 <p>Information published.</p> 1.1 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Fabric Elevation of Privilege Vulnerability <p>Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Fabric Microsoft No CVE-2026-63509 Relative Path Traversal 21730 Elevation of Privilege 21730 Critical 21730 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21730 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Tampering Vulnerability <p>Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.</p> <p><strong>What could an attacker achieve by exploiting this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability to make unauthorized modifications to protected system data. This could allow the attacker to alter system state or configuration beyond their normal privileges.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-63512 Incorrect Authorization 10950 11585 11961 Tampering 10950 Tampering 11585 Tampering 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Henrique Pereira with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63513 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC 0ccbbf129444eb66344ccafb92b00df4 haowei yan &amp; xiaozun tang 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-63514 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 MEOW 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-63515 Out-of-bounds Read Integer Underflow (Wrap or Wraparound) 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002902 https://www.microsoft.com/en-us/download/details.aspx?id=108783 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002902 10753 10754 5002902 [SeaDragnoL](https://x.com/seadragnol) with [Qrious Secure](https://x.com/qriousec) and [grass](https://x.com/gr4ss341) from [Viettel Cyber Security](https://x.com/vcslab). <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/viettelcybersec">Viettel Cyber Security</a> 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/jaemin-kim-b99503278/">Jmini</a> <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37</a> with UIUC <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to loss of confidentiality (C:H)? What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability allows an attacker to impersonate another user and access information based on the victim user's permission levels.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-63516 Deserialization of Untrusted Data 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Anonymous Thanatos Tian (HKPolyU) &amp; npc0vo with Diffract Genwei Jiang with <a href="https://cloud.google.com/security/flare">Google Cloud, FLARE OTF</a> 1.2 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Office Graphics Component Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Microsoft Yes CVE-2026-63517 Out-of-bounds Read 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 Haein Lee with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-63518 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10765 10766 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10765 Remote Code Execution 10766 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10765 Critical 10766 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10765 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10766 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002755 https://www.microsoft.com/en-us/download/details.aspx?id=108768 10765 10766 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002755 10765 10766 5002755 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> Microsoft Office Graphics Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63519 Heap-based Buffer Overflow 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In a network-based attack, an unauthenticated attacker could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>A high attack complexity means that successful exploitation is complex and time‑consuming, requiring significant effort and precise conditions for an attacker to reliably exploit the vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-63520 Improper Input Validation 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://x.com/stephenfewer">Stephen Fewer</a> with <a href="https://www.rapid7.com/">Rapid7</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-63521 Out-of-bounds Read 11573 11574 11762 11763 11952 11953 12420 12421 10746 10747 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 10746 Information Disclosure 10747 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 vietnq namnp with <a href="https://x.com/vcslab">Viettel Cyber Security</a> Haein Lee with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-24T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Azure SQL Database Elevation of Privilege Vulnerability <p>Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SQL sysadmin privileges.</p> Azure SQL Database Microsoft No CVE-2026-63522 Incorrect Permission Assignment for Critical Resource 21621 Elevation of Privilege 21621 Critical 21621 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21621 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.0 2026-08-06T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63524 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-63525 Numeric Truncation Error 11573 11574 11762 11763 11952 11953 12420 12421 10746 10747 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10746 Remote Code Execution 10747 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 10746 Critical 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> Anonymous Haein Lee with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63526 Stack-based Buffer Overflow 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-63527 Stack-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-63528 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63529 Out-of-bounds Read 11573 11574 11762 11763 11952 11953 12420 12421 10753 10754 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 10753 Information Disclosure 10754 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-63530 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-63531 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63532 Integer Overflow or Wraparound Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 1.1 2026-09-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-63533 Heap-based Buffer Overflow 11573 11574 11763 11951 11952 11953 12420 12421 12440 10753 10754 11762 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 11762 Remote Code Execution 21368 Important 11573 Important 11574 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 11762 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11763 11952 11953 12420 12421 11762 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11763 11952 11953 12420 12421 11762 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64897 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://th.linkedin.com/in/navaponpremkasem">Navapon Premkasem</a> <a href="https://www.linkedin.com/in/songsit-srisura/">Songsit Srisura</a> P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-64898 Heap-based Buffer Overflow Integer Overflow or Wraparound 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> haowei yan &amp; xiaozun tang 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-64899 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://smlijun.github.io/">DongJun Kim (smlijun)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.1 2026-08-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-08-31T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with permissions to add or modify content on an affected SharePoint page could store malicious script content in the page. The script could run in the security context of another user when that user views and interacts with the affected content, potentially allowing the attacker to access or modify SharePoint data available to that user.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64900 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64901 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 odgrso waid 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64902 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-64903 Integer Overflow or Wraparound Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 1.1 2026-08-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Microsoft Yes CVE-2026-64904 Access of Resource Using Incompatible Type ('Type Confusion') 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Important 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-64905 Buffer Over-read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-64906 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10751 10752 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10751 Remote Code Execution 10752 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10751 Important 10752 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10751 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10752 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002832 https://www.microsoft.com/en-us/download/details.aspx?id=108771 10751 10752 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002832 10751 10752 5002832 Anonymous Shane Groff with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-13T07:00:00 <p>Acknowledgement Updated</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-64907 Stack-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10746 Critical 10747 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-64908 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10751 10752 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10751 Remote Code Execution 10752 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10751 Important 10752 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10751 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10752 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002832 https://www.microsoft.com/en-us/download/details.aspx?id=108771 10751 10752 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002832 10751 10752 5002832 Shane Groff with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-64909 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read Heap-based Buffer Overflow 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-64910 Untrusted Pointer Dereference 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-64911 Integer Overflow or Wraparound Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-64912 Stack-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10751 10752 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10751 Remote Code Execution 10752 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10751 Important 10752 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10751 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10752 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002832 https://www.microsoft.com/en-us/download/details.aspx?id=108771 10751 10752 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002832 10751 10752 5002832 Shane Groff with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-64914 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10751 10752 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10751 Remote Code Execution 10752 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10751 Important 10752 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10751 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10752 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002813 https://www.microsoft.com/en-us/download/details.aspx?id=108765 10751 10752 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002813 10751 10752 5002813 Shane Groff with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-64915 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64916 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://smlijun.github.io/">DongJun Kim (smlijun) with UIUC</a>, <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl) with UIUC</a>, <a href="https://nevul37.github.io/">Jongseong Kim (nevul37) with UIUC</a> P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-64917 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-64919 Stack-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10751 10752 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10751 Remote Code Execution 10752 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10751 Important 10752 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10751 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10752 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002832 https://www.microsoft.com/en-us/download/details.aspx?id=108771 10751 10752 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002832 10751 10752 5002832 Shane Groff with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Access Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Access Microsoft Yes CVE-2026-64920 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10751 10752 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10751 Remote Code Execution 10752 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10751 Important 10752 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10751 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10752 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002832 https://www.microsoft.com/en-us/download/details.aspx?id=108771 10751 10752 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002832 10751 10752 5002832 Shane Groff with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An authenticated attacker with access to the domain could perform remote code execution on the SharePoint server to elevate themselves to SharePoint admin.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64921 Missing Authentication for Critical Function 10950 11585 11961 Elevation of Privilege 10950 Elevation of Privilege 11585 Elevation of Privilege 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Kn1ght Michael Maturi with <a href="https://google.com/">Google/Mandiant</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability might be able to run their scripts in the security context of the current user by enticing the user to click on a link resulting in a cross-site scripting attack on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-64922 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Kn1ght P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-65656 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11573 11574 11762 11763 11952 11953 12420 12421 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Ben Faull with Microsoft Hidetake Jo with Microsoft Harry Fokas with Microsoft Michael Van Leeuwen with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-65657 Use After Free 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 Sriram Sridhar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-65658 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://twitter.com/_q5ca">Q5Ca</a> with <a href="https://lab.viettelcybersecurity.com/">VCSLAB of Viettel Cyber Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-65660 Improper Control of Generation of Code ('Code Injection') 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://twitter.com/_l0gg">khoadha</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-09-25T07:00:00 <p>As of 9/25/2026, Microsoft had reliable evidence of observed attacks against exploitation of this vulnerability.</p> 1.1 2026-08-27T07:00:00 <p>Updated Impact in the Security Updates table, CVE Title, and FAQs. This is an informational change only.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office Microsoft Yes CVE-2026-65661 Heap-based Buffer Overflow 11762 11763 11953 11952 12420 12421 10753 11573 10754 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11953 Remote Code Execution 11952 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10753 Remote Code Execution 11573 Remote Code Execution 10754 Remote Code Execution 11574 Important 11762 Important 11763 Important 11953 Important 11952 Important 12420 Important 12421 Important 10753 Important 11573 Important 10754 Important 11574 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 Click to Run 11762 11763 11953 11952 12420 12421 11573 11574 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 11953 11952 12420 12421 11573 11574 Click to Run 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 5002791 https://www.microsoft.com/en-us/download/details.aspx?id=108770 10753 10754 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002791 10753 10754 5002791 5002795 https://www.microsoft.com/en-us/download/details.aspx?id=108772 10753 10754 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002795 10753 10754 5002795 5002900 https://www.microsoft.com/en-us/download/details.aspx?id=108761 10753 10754 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002900 10753 10754 5002900 Renzhi Li Renzhi Li 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows GDI Information Disclosure Vulnerability <p>Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability may allow an attacker to access small portions of memory from the affected application when it processes a specially crafted Enhanced Metafile (EMF). This issue is an out‑of‑bounds read, any disclosure would be limited to whatever data happens to reside in adjacent memory at the time.</p> Windows GDI Microsoft Yes CVE-2026-65662 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-65663 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://x.com/_splitline_">splitline</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-65664 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-65665 Deserialization of Untrusted Data 11585 11961 Remote Code Execution 11585 Remote Code Execution 11961 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://www.linkedin.com/in/john-nzyuko-412b563b1/">John Nzyuko</a> <a href="https://twitter.com/tuo4n8">tuo4n8</a> with <a href="https://vsrc.vng.com.vn/">Verichains Cyber Force</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Teams Elevation of Privilege Vulnerability <p>Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Teams Microsoft No CVE-2026-65667 Missing Authorization 11686 Elevation of Privilege 11686 Critical 11686 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11686 Henrique Pereira with Microsoft 1.0 2026-08-06T07:00:00 <p>Information published.</p> Microsoft Purview eDiscovery Elevation of Privilege Vulnerability <p>Improper access control in Microsoft Purview eDiscovery allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Purview eDiscovery Microsoft No CVE-2026-65668 Improper Access Control 21234 Elevation of Privilege 21234 Critical 21234 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21234 Henrique Pereira with Microsoft 1.0 2026-08-06T07:00:00 <p>Information published.</p> Remote Access API Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access API Microsoft Yes CVE-2026-65671 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> Remote Access API Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access API Microsoft Yes CVE-2026-65672 Heap-based Buffer Overflow 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Entra Connect Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges over a network.</p> Microsoft Entra Connect Sync Microsoft Yes CVE-2026-65673 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 21619 Elevation of Privilege 21619 Important 21619 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21619 Release Notes https://entra.microsoft.com/#view/Microsoft_AAD_Connect_Provisioning/AADConnectMenuBlade/~/GetStarted 21619 No Security Update 2.6.84.0 https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/reference-connect-version-history#26840 21619 Release Notes Shira Hoffman 1.0 2026-08-11T07:00:00 <p>Information published.</p> CoPilot Chat Security Feature Bypass Vulnerability <p>No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by supplying specially crafted content that the AI coding agent processes, causing it to write files outside the workspace folder the user opened. Exploitation requires the user to be operating the agent in an automatic edit-approval mode. Successful exploitation could allow an attacker to create or modify files that the user did not intend the agent to change.</p> Visual Studio Code CoPilot Chat Extension Microsoft Yes CVE-2026-65675 Missing Authorization 16782 Security Feature Bypass 16782 Important 16782 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 16782 Release Notes https://code.visualstudio.com/Download 16782 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 16782 Release Notes Rayhan Destian Theodor N. Engoey 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.3 2026-09-24T07:00:00 <p>Updated the fixed version information and download link. The fix was previously believed to be included in Dynamics 365 Server (on-premises) version 6.2; however, it has been confirmed that the fix is included in Dynamics 365 Server v9.1 (on-premises) Update 1.45 (version 9.1.0045.0011). The download link, release notes, and build number has been updated accordingly in the Security Updates table. This is an informational change only.</p> 1.1 2026-08-19T07:00:00 <p>CWE added. Informational change only.</p> 1.2 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>For an attacker to exploit this vulnerability, they would need to have knowledge of a specific operation that triggers a memory allocation failure, specifically a use after free.</p> Windows Win32K Microsoft Yes CVE-2026-65678 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows iSCSI Target Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows iSCSI Target Service Microsoft Yes CVE-2026-65679 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Linzishan & Anemone & Zhiniang Peng (HUST) 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-13T07:00:00 <p>Updated the severity of the products in the Security Updates table. This is an informational change only.</p> Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ROOT privileges.</p> Microsoft OneDrive Microsoft Yes CVE-2026-65680 Improper Link Resolution Before File Access ('Link Following') 12168 Elevation of Privilege 12168 Important 12168 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12168 Release Notes https://oneclient.sfx.ms/Mac/Installers/26.095.0519.0003/universal/OneDrive.pkg 12168 No Security Update 26.095.0519.0003 https://learn.microsoft.com/en-us/sharepoint/sync-release-notes 12168 Release Notes anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows iSCSI Target Service Denial of Service Vulnerability <p>Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.</p> Windows iSCSI Target Service Microsoft Yes CVE-2026-65681 NULL Pointer Dereference 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Linzishan &amp; Anemone &amp; Zhiniang Peng (HUST) 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Teams for Android Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, successful exploitation of this vulnerability could lead to loss of confidentiality (C:H)? What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability allows an attacker to impersonate another user and access information based on the victim user's permission levels.</p> Microsoft Teams for Android Microsoft Yes CVE-2026-65767 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 12007 Spoofing 12007 Important 12007 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12007 Release Notes https://play.google.com/store/apps/details?id=com.microsoft.teams 12007 No Security Update 1.0.0.2026142702 https://play.google.com/store/apps/details?id=com.microsoft.teams 12007 Release Notes Ofek Levin Enclave with <a href="https://enclave.ai/">Enclave AI</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-16T07:00:00 <p>Corrected build number for the security update. This in an informational change only.</p> Microsoft Teams Remote Code Execution Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Teams for Android Microsoft Yes CVE-2026-65768 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 12007 Remote Code Execution 12007 Important 12007 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12007 Release Notes https://play.google.com/store/apps/details?id=com.microsoft.teams 12007 No Security Update 1.0.0.2026133602 https://play.google.com/store/apps/details?id=com.microsoft.teams 12007 Release Notes Ofek Levin with <a href="https://enclave.ai/">Enclave</a> 1.1 2026-08-16T07:00:00 <p>Corrected build number for the security update. This in an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Teams iOS Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Personally Identifiable Information (PII).</p> Microsoft Teams Mobile Microsoft Yes CVE-2026-65769 Exposure of Sensitive Information to an Unauthorized Actor 11858 Information Disclosure 11858 Important 11858 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11858 Release Notes https://apps.apple.com/us/app/microsoft-teams/id1113153706 11858 No Security Update 8.14.1 https://apps.apple.com/us/app/microsoft-teams/id1113153706 11858 Release Notes Ofek Levin Enclave with <a href="https://enclave.ai/">Enclave</a> 1.1 2026-08-16T07:00:00 <p>Corrected build number for the security update. This in an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability <p>Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache Cassandra allows an unauthorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Managed Instance for Apache Cassandra Microsoft No CVE-2026-65770 Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') 12387 Remote Code Execution 12387 Critical 12387 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12387 <a href="https://twitter.com/wtm_offensi">wtm</a> with <a href="https://offensi.com/">Offensi</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-65773 Improper Access Control 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Angelboy (@scwuaptx) from DEVCORE Research Team and TwinkleStar03 (@_twinklestar03), working with DEVCORE Internship Program, working with TrendAI Zero Day Initiative Angelboy (@scwuaptx) from DEVCORE Research Team and TwinkleStar03 (@_twinklestar03), working with DEVCORE Internship Program, working with TrendAI Zero Day Initiative 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-65774 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-65775 Use After Free Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely pwn2addr Kentaro Kawane of GMO Cybersecurity by Ierae working with Trend Zero Day Initiative Anonymous Kentaro Kawane of GMO Cybersecurity by Ierae working with Trend Zero Day Initiative Pwnforr777 Pwnforr777 1.4 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-08-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-08-31T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.3 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-65776 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> Kentaro Kawane of GMO Cybersecurity by Ierae working with Trend Zero Day Initiative Anonymous Marcin Wiazowski working with TrendAI Zero Day Initiative 1.1 2026-08-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-08-31T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.3 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Active Directory Security Feature Bypass Vulnerability <p>Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system and the ability to manipulate its components to trigger a specific condition. Successful exploitation is not guaranteed and depends on a combination of factors that may include the environment, system configuration, and the presence of additional security measures.</p> <p><strong>What security feature could an attacker bypass by exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass a cryptographic key validation policy, causing a key that should have been rejected as weak to be accepted.</p> Windows Active Directory Microsoft Yes CVE-2026-65777 Inadequate Encryption Strength 11923 11924 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Security Feature Bypass 11923 Security Feature Bypass 11924 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12242 Security Feature Bypass 12243 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 11923 Important 11924 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11924 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12242 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12243 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Autopilot Microsoft Yes CVE-2026-65778 Use After Free 20437 20438 12389 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 20437 Important 20438 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Autopilot Microsoft Yes CVE-2026-65779 Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous Hwiwon Lee (hwiwonl), SEC-agent team develacker@gmail.com Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.1 2026-08-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Autopilot Microsoft Yes CVE-2026-65780 Double Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Autopilot Microsoft Yes CVE-2026-65781 Use After Free 20437 20438 12389 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 20437 Important 20438 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Autopilot Microsoft Yes CVE-2026-65782 Use After Free 20437 20438 12389 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 20437 Important 20438 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Autopilot Elevation of Privilege Vulnerability <p>Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Autopilot Microsoft Yes CVE-2026-65783 Use After Free 20437 20438 12389 12390 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Important 20437 Important 20438 Important 12389 Important 12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is a small amount of kernel memory which could be leaked back to the attacker.</p> Windows NTFS Microsoft Yes CVE-2026-65784 Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DHCP Client Denial of Service Vulnerability <p>Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.</p> Windows DHCP Client Microsoft Yes CVE-2026-65785 Uncontrolled Resource Consumption 12437 20437 20438 12389 12390 12436 20853 20854 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Jay Ladhad 1.0 2026-08-11T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-65786 Heap-based Buffer Overflow Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 pwn2addr Byzero with Kunlun Lab & Zhiniang Peng with HUST <a href="https://sionthanatos.github.io/">Thanatos Tian (HKPolyU) &amp; npc0vo</a> with https://diffract-ai.com/ Varun Goel 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-10-09T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-65787 Heap-based Buffer Overflow Out-of-bounds Read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Thanatos Tian (HKPolyU) & npc0vo & Paul wxz with Diffract haowei yan &amp; xiaozun tang 1.2 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-24T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-65788 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Exploitation requires specific conditions, including particular network configurations and timing conditions, and has only been observed in limited scenarios. This means an attacker cannot reliably exploit the issue in all environments and may need favorable setup or circumstances for it to work.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows DNS Microsoft Yes CVE-2026-65789 Use After Free 11571 11572 11923 11924 12437 12436 10816 10855 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10816 10855 5120418 <a href="https://x.com/dark_puzzle">Souhail Hammou</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-08T07:00:00 <p>Updated software table to remove clients versions because this vulnerability only impacts Windows Servers. This is an informational change only.</p> Windows Message Queuing Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Message Queuing Microsoft Yes CVE-2026-65790 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows iSCSI Target Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows iSCSI Target Service Microsoft Yes CVE-2026-65791 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous Linzishan, Anemone and Zhiniang Peng with HUST 1.2 2026-10-06T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-08-18T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows SMB Client Information Disclosure Vulnerability <p>Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Windows SMB Client Microsoft Yes CVE-2026-65794 Buffer Over-read 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-65795 Numeric Truncation Error 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 Rajesh Kumar 1.1 2026-08-20T07:00:00 <p>CWE added. Informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows iSCSI Target Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.</p> Windows iSCSI Target Service Microsoft Yes CVE-2026-65796 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Linzishan, Anemone and Zhiniang Peng with HUST 1.1 2026-08-13T07:00:00 <p>Updated the CVE title, changed the security impact from Denial of Service to Remote Code Execution, changed the severity from Important to Critical, updated the CVSS score from 5.9 to 8.1, and corrected the severity and impact entries in the Security Updates table. These are informational changes only. Customers who have successfully installed the update do not need to take any further action.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-65797 Numeric Truncation Error Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-65798 Numeric Truncation Error 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-65799 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Exchange Online Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Exchange Online Microsoft No CVE-2026-65801 Server-Side Request Forgery (SSRF) 10133 Elevation of Privilege 10133 Critical 10133 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10133 <a href="https://ca.linkedin.com/in/varsha-chahal">Varsha Chahal</a> with Microsoft 1.0 2026-08-20T07:00:00 <p>Information published.</p> Azure CycleCloud Information Disclosure Vulnerability <p>Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of credentials.</p> Azure CycleCloud Microsoft Yes CVE-2026-65806 Missing Authorization 21680 Information Disclosure 21680 Important 21680 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21680 Release Notes https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/upgrade-and-migrate?view=cyclecloud-8 21680 No Security Update 8.9.2 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-2?view=cyclecloud-8 21680 Release Notes <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBreach.ai</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-65807 Access of Resource Using Incompatible Type ('Type Confusion') 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> .NET Framework Elevation of Privilege Vulnerability <p>Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.</p> .NET Framework Microsoft Yes CVE-2026-65810 Relative Path Traversal 12078-20853 12078-20854 2472-20853 2472-20854 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 11723-10852 11723-10853 11723-10816 11723-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-12437 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12079-12436 2472-10378 2472-10379 2472-10483 2472-10543 Elevation of Privilege 12078-20853 Elevation of Privilege 12078-20854 Elevation of Privilege 2472-20853 Elevation of Privilege 2472-20854 Elevation of Privilege 11650-10852 Elevation of Privilege 11650-10853 Elevation of Privilege 11650-10816 Elevation of Privilege 11650-10855 Elevation of Privilege 11650-10378 Elevation of Privilege 11650-10379 Elevation of Privilege 11650-10483 Elevation of Privilege 11650-10543 Elevation of Privilege 11676-11568 Elevation of Privilege 11676-11569 Elevation of Privilege 11676-11570 Elevation of Privilege 11676-11571 Elevation of Privilege 11676-11572 Elevation of Privilege 11676-11923 Elevation of Privilege 11676-11924 Elevation of Privilege 11676-11929 Elevation of Privilege 11676-11930 Elevation of Privilege 11676-11931 Elevation of Privilege 11676-12097 Elevation of Privilege 11676-12098 Elevation of Privilege 11676-12099 Elevation of Privilege 11677-11568 Elevation of Privilege 11677-11569 Elevation of Privilege 11677-11570 Elevation of Privilege 11677-11571 Elevation of Privilege 11677-11572 Elevation of Privilege 11723-10852 Elevation of Privilege 11723-10853 Elevation of Privilege 11723-10816 Elevation of Privilege 11723-10855 Elevation of Privilege 11863-10378 Elevation of Privilege 11863-10379 Elevation of Privilege 11863-10483 Elevation of Privilege 11863-10543 Elevation of Privilege 12079-11923 Elevation of Privilege 12079-11924 Elevation of Privilege 12079-11929 Elevation of Privilege 12079-11930 Elevation of Privilege 12079-11931 Elevation of Privilege 12079-12097 Elevation of Privilege 12079-12098 Elevation of Privilege 12079-12099 Elevation of Privilege 12079-12437 Elevation of Privilege 12079-20437 Elevation of Privilege 12079-20438 Elevation of Privilege 12079-12242 Elevation of Privilege 12079-12243 Elevation of Privilege 12079-12389 Elevation of Privilege 12079-12390 Elevation of Privilege 12079-12436 Elevation of Privilege 2472-10378 Elevation of Privilege 2472-10379 Elevation of Privilege 2472-10483 Elevation of Privilege 2472-10543 Important 12078-20853 Important 12078-20854 Important 2472-20853 Important 2472-20854 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11570 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11570 Important 11677-11571 Important 11677-11572 Important 11723-10852 Important 11723-10853 Important 11723-10816 Important 11723-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-12437 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12079-12436 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 5120711 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120711 12078-20853 12078-20854 Maybe Security Update 4.8.9344.0 https://support.microsoft.com/help/5120711 12078-20853 12078-20854 5120711 5120747 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120747 2472-20853 2472-20854 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 https://support.microsoft.com/help/5120747 2472-20853 2472-20854 5120747 5120702 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120702 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120702 11650-10852 11650-10853 11650-10816 11650-10855 5120702 5120704 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120704 11650-10378 11650-10379 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120704 11650-10378 11650-10379 5120704 5120706 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120706 11650-10483 11650-10543 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120706 11650-10483 11650-10543 5120706 5120703 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120703 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 https://support.microsoft.com/help/5120703 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 5120703 5120705 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120705 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0 https://support.microsoft.com/help/5120705 11676-11923 11676-11924 5120705 5120701 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120701 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0 https://support.microsoft.com/help/5120701 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5120701 5120698 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120698 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 https://support.microsoft.com/help/5120698 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 5120698 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 11723-10852 11723-10853 11723-10816 11723-10855 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0 https://support.microsoft.com/help/5120418 11723-10852 11723-10853 11723-10816 11723-10855 5120418 5120699 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120699 11863-10378 11863-10379 Maybe Security Update 4.7.4144.0 https://support.microsoft.com/help/5120699 11863-10378 11863-10379 5120699 5120700 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120700 11863-10483 11863-10543 Maybe Security Update 4.7.4144.0 https://support.microsoft.com/help/5120700 11863-10483 11863-10543 5120700 5120714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120714 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120714 12079-11923 12079-11924 5120714 5120709 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120709 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120709 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5120709 5120708 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120708 12079-12437 12079-20437 12079-20438 12079-12436 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9344.0 https://support.microsoft.com/help/5120708 12079-12437 12079-20437 12079-20438 12079-12436 5120708 5120713 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120713 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120713 12079-12242 12079-12243 5120713 5120710 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120710 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120710 12079-12389 12079-12390 5120710 5120716 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120716 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 https://support.microsoft.com/help/5120716 2472-10378 2472-10379 5120716 5120695 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120695 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 https://support.microsoft.com/help/5120695 2472-10483 2472-10543 5120695 <a href="https://x.com/kookiz/">Kevin Gosse</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Power BI Remote Code Execution Vulnerability <p>Improper input validation in Power BI allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with low-level access to an affected server could send a specially crafted request to execute code on the server. User interaction is not required.</p> Power BI Microsoft Yes CVE-2026-65811 Improper Input Validation 11719 Remote Code Execution 11719 Important 11719 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11719 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=105944 11719 Maybe Security Update 1.26.9682.1442 https://learn.microsoft.com/en-us/power-bi/report-server/changelog 11719 Release Notes Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-19T07:00:00 <p>Corrected the Power BI Report Server version in the Security Updates table to use the public release version instead of the internal build number. This is an informational change only.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-65813 Server-Side Request Forgery (SSRF) 16792 12039 12502 12293 Elevation of Privilege 16792 Elevation of Privilege 12039 Elevation of Privilege 12502 Elevation of Privilege 12293 Important 16792 Important 12039 Important 12502 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 16792 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12039 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12502 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12293 5121573 https://www.microsoft.com/en-us/download/details.aspx?id=108785 5103212 16792 Yes Security Update 15.02.2562.046 https://support.microsoft.com/help/5121573 16792 5121573 5121573 https://support.microsoft.com/help/5121573 16792 5121576 5103215 12039 Yes Security Update 15.01.2507.072 https://support.microsoft.com/help/5121576 12039 5121576 5121576 https://support.microsoft.com/help/5121576 12039 5121574 5103213 12502 Yes Security Update 15.02.1748.049 https://support.microsoft.com/help/5121574 12502 5121574 5121574 https://support.microsoft.com/help/5121574 12502 5121575 5103214 12293 Yes Security Update 15.02.1544.044 https://support.microsoft.com/help/5121575 12293 5121575 5121575 https://support.microsoft.com/help/5121575 12293 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-28T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Port Driver Microsoft Yes CVE-2026-65814 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit the vulnerability by sending specially crafted data that is processed by the vulnerable component, causing it to deserialize untrusted input and execute unintended actions within the service context.</p> Microsoft Dynamics 365 (on-premises) Microsoft Yes CVE-2026-65815 Deserialization of Untrusted Data 11921 Remote Code Execution 11921 Important 11921 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11921 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108757 11921 No Security Update 9.1.0047.0006 https://support.microsoft.com/en-US/servicing/dynamics/crm/microsoft-dynamics-365-on-premises-cumulative-updates 11921 Release Notes f7d8c52bec79e42795cf15888b85cbad 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Arc Elevation of Privilege Vulnerability <p>Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Arc Microsoft No CVE-2026-65816 Use of Incorrectly-Resolved Name or Reference 12385 Elevation of Privilege 12385 Critical 12385 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12385 <a href="https://www.linkedin.com/in/hodaya-sheer">Hodaya Sheer</a> with Microsoft 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> Microsoft Dynamics 365 (on-premises) Microsoft Yes CVE-2026-66301 Exposure of Sensitive Information to an Unauthorized Actor 11921 Information Disclosure 11921 Important 11921 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11921 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108757 11921 No Security Update 9.1.0047.0006 https://support.microsoft.com/en-US/servicing/dynamics/crm/microsoft-dynamics-365-on-premises-cumulative-updates 11921 Release Notes <a href="https://twitter.com/hoangnx99">hoangha</a> with <a href="https://lab.viettelcybersecurity.com/">VCSLab of Viettel Cyber Security</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure SQL Database Elevation of Privilege Vulnerability <p>Improper access control in Azure SQL Database allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SQL Database Microsoft No CVE-2026-66309 Improper Access Control 21621 Elevation of Privilege 21621 Critical 21621 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21621 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a victim to perform a specific action, such as copying files or executing a command, and for an attacker with appropriate access to have pre-planted malicious files with knowledge of where they should be placed on the victim's system.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-66323 Improper Neutralization of Parameter/Argument Delimiters 21776 11815 11966 12480 21777 21955 Remote Code Execution 21776 Remote Code Execution 11815 Remote Code Execution 11966 Remote Code Execution 12480 Remote Code Execution 21777 Remote Code Execution 21955 Important 21776 Important 11815 Important 11966 Important 12480 Important 21777 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21776 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11815 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11966 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12480 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 21955 Release Notes 21776 11815 11966 12480 21777 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21776 11815 11966 12480 21777 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-08-28T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-66324 External Control of File Name or Path 11966 12480 11815 21776 21777 21955 Spoofing 11966 Spoofing 12480 Spoofing 11815 Spoofing 21776 Spoofing 21777 Spoofing 21955 Important 11966 Important 12480 Important 11815 Important 21776 Important 21777 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11966 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12480 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11815 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21776 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21955 Release Notes 11966 12480 11815 21776 21777 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11966 12480 11815 21776 21777 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-08-28T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and integrity (I:N), but could lead to some loss of availability (A:L). What does that mean for this vulnerability?</strong></p> <p>While we cannot rule out the impact to Confidentiality, Integrity, and Availability, the ability to exploit this vulnerability by itself is limited. An attacker would need to combine this with other vulnerabilities to perform an attack.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-66798 Use After Free 11966 12480 21776 11815 21777 21955 Remote Code Execution 11966 Remote Code Execution 12480 Remote Code Execution 21776 Remote Code Execution 11815 Remote Code Execution 21777 Remote Code Execution 21955 Important 11966 Important 12480 Important 21776 Important 11815 Important 21777 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11966 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12480 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 21776 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11815 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 21955 Release Notes 11966 12480 21776 11815 21777 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11966 12480 21776 11815 21777 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-08-28T07:00:00 <p>Information published.</p> Windows Key Guard Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain Virtual Trust Level 1 (VTL1) privileges.</p> Windows Key Guard Microsoft Yes CVE-2026-66799 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5123303 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123303 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5123303 11923 11924 5123303 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 yhw &amp; txz Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure Data Factory Information Disclosure Vulnerability <p>Server-side request forgery (ssrf) in Azure Data Factory allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Data Factory Microsoft No CVE-2026-66800 Server-Side Request Forgery (SSRF) 12040 Information Disclosure 12040 Critical 12040 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.6 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12040 <a href="https://ca.linkedin.com/in/varsha-chahal">Varsha Chahal</a> with Microsoft 1.0 2026-08-20T07:00:00 <p>Information published.</p> Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> Windows Device Health Attestation (DHA) Microsoft Yes CVE-2026-66802 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11924 12437 12436 20853 20854 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-20T07:00:00 <p>Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.</p> Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability <p>Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Cross Device Service Microsoft Yes CVE-2026-66804 Improper Access Control Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely James Forshaw with Google Project Zero shoodagiri with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae Inc</a> <a href="https://www.linkedin.com/in/daniele-linguaglossa/">Daniele Linguaglossa</a> <a href="https://infosec.exchange/@wdormann">Will Dormann</a> with <a href="https://vu.ls/">Vul Labs</a> yhw &amp; txz <a href="https://twitter.com/philiptsukerman">Philip Tsukerman</a> with Palo Alto Networks Anonymous <a href="https://github.com/rat5ak">Daniel Wade</a> with <a href="https://nadsec.online/">nadsec</a> hamayanhamayan <a href="https://www.linkedin.com/in/kim-d-5b3114111/">Kim Dvash</a> kaijieguigui working with TrendAI Zero Day Initiative <a href="https://t.me/goldenhackspace">Ivan Chernov aka Riddle</a> <a href="https://www.linkedin.com/in/david-c-826599a4/">David Carliez</a> with DC CyberSecurity <a href="https://x.com/thomasklemenc">Thomas Klemenc</a> sorte haowei yan 1.7 2026-10-07T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-08-13T07:00:00 <p>Acknowledgement Updated</p> 1.3 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> 1.4 2026-08-18T07:00:00 <p>Acknowledgement Updated</p> 1.5 2026-08-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.6 2026-09-30T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-66805 Deserialization of Untrusted Data 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002927 https://www.microsoft.com/en-us/download/details.aspx?id=108862 5002908 11961 Yes Security Update 16.0.20326.20190 https://support.microsoft.com/help/5002927 11961 5002927 odgrso with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae Inc</a> Genwei Jiang with <a href="https://cloud.google.com/security/flare">Google Cloud, FLARE OTF</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-66806 Off-by-one Error Out-of-bounds Read 11573 11574 11762 11763 11952 11953 12420 12421 10746 10747 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 10746 Information Disclosure 10747 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Haein Lee with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-66807 Stack-based Buffer Overflow 11763 11573 11952 11574 11762 12420 11953 12421 21368 11951 12440 Remote Code Execution 11763 Remote Code Execution 11573 Remote Code Execution 11952 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 12420 Remote Code Execution 11953 Remote Code Execution 12421 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Critical 11763 Critical 11573 Critical 11952 Critical 11574 Critical 11762 Critical 12420 Critical 11953 Critical 12421 Critical 21368 Critical 11951 Critical 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Click to Run 11763 11573 11952 11574 11762 12420 11953 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11763 11573 11952 11574 11762 12420 11953 12421 Click to Run Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Sriram Sridhar 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> Microsoft SharePoint Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an authenticated attacker, as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-66808 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Graphics Component Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-66809 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-66810 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> Haein Lee with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-6726">CVE-2026-6726</a> is a Spoofing vulnerability in the TPM 2.0 reference implementation involving improper object-slot reuse. MITRE assigned this CVE on behalf of the Trusted Computing Group. This document incorporates updates to Microsoft Windows that address this vulnerability.</p> <p>Please see <a href="https://www.cve.org/CVERecord?id=CVE-2026-6726">CVE-2026-6726</a> for more information.</p> <p><strong>Do I need to do anything additional in order to be protected from this vulnerability?</strong></p> <p>Yes, you will need to install the following packages:</p> <ul> <li>Windows 11 Enterprise, versions 25H2 and 24H2: <a href="https://support.microsoft.com/help/5123607">KB5123607</a></li> <li>Windows 11 Enterprise, versions 25H2 and 24H2 — Additional update for devices where the Pluton security processor has been configured as the TPM: <a href="https://support.microsoft.com/en-us/servicing/os/hotpatch/windows-11/2026/kb5123273-windows-11-24h2-25h2-standalone-cbs-hotpatch">KB5123273</a> (restart required)</li> <li>Windows Server 2022: <a href="https://support.microsoft.com/en-us/servicing/os/hotpatch/windows-11/2026/kb5123607-windows-11-24h2-25h2-standalone-cbs-hotpatch">KB5123303</a> (restart required)</li> </ul> Windows TPM MITRE Yes CVE-2026-6726 Use of Uninitialized Resource Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 20546 20548 20549 16814 20550 16815 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 11924 Spoofing 11929 Spoofing 11930 Spoofing 11931 Spoofing 12097 Spoofing 12098 Spoofing 12099 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12242 Spoofing 12243 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Spoofing 10852 Spoofing 10853 Spoofing 20546 Spoofing 20548 Spoofing 20549 Spoofing 16814 Spoofing 20550 Spoofing 16815 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 20546 Important 20548 Important 20549 Important 16814 Important 20550 Important 16815 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11924 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12242 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12243 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20546 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20548 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20549 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 16814 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 20550 7.9 6.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 16815 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5123303 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123303 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5123303 11923 11924 5123303 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5123607 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123607 20437 20438 Yes Security Hotpatch Update 10.0.26200.9165 https://support.microsoft.com/help/5123607 20437 20438 5123607 5123273 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123273 20437 20438 Yes Security Update 10.0.26200.9165 https://support.microsoft.com/help/5123273 20437 20438 5123273 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5123607 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123607 12389 12390 Yes Security Hotpatch Update 10.0.26100.9165 https://support.microsoft.com/help/5123607 12389 12390 5123607 5123273 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123273 12389 12390 Yes Security Update 10.0.26100.9165 https://support.microsoft.com/help/5123273 12389 12390 5123273 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 5120418 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability <p><a href="https://www.cve.org/CVERecord?id=CVE-2026-6727">CVE-2026-6727</a> is an Information Disclosure vulnerability in the TPM 2.0 reference implementation involving an RSA OAEP timing side channel. MITRE assigned this CVE on behalf of the Trusted Computing Group. This document incorporates updates to Microsoft Windows that address this vulnerability.</p> <p>Please see <a href="https://www.cve.org/CVERecord?id=CVE-2026-6727">CVE-2026-6727</a> for more information.</p> <p><strong>What type of information could be disclosed by this vulnerability</strong></p> <p>If the attacker has both the ability to modify the encrypted secret where it is stored and to observe the precise timing for the secret being decrypted by the application, the attacker could infer the original secret across many decryption attempts.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to carefully time their actions to exploit the timing differences in the execution of specific operations. They must accurately measure these timing variations to infer sensitive information or gain unauthorized access. This often involves sophisticated techniques to manipulate and observe the timing behavior of the target system.</p> <p><strong>Do I need to do anything additional in order to be protected from this vulnerability?</strong></p> <p>Yes, you will need to install the following packages:</p> <ul> <li>Windows Server 2022: <a href="https://support.microsoft.com/en-us/servicing/os/hotpatch/windows-11/2026/kb5123607-windows-11-24h2-25h2-standalone-cbs-hotpatch">KB5123303</a> (restart required)</li> </ul> Windows TPM MITRE Yes CVE-2026-6727 Observable Timing Discrepancy 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 20546 20548 20549 20550 16814 16815 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11924 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 20546 Information Disclosure 20548 Information Disclosure 20549 Information Disclosure 20550 Information Disclosure 16814 Information Disclosure 16815 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 20546 Important 20548 Important 20549 Important 20550 Important 16814 Important 16815 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20546 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20548 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20549 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 20550 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 16814 5.9 5.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 16815 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5123303 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5123303 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5123303 11923 11924 5123303 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 5120418 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure SQL Database Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SQL Database Microsoft No CVE-2026-68782 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 21621 Elevation of Privilege 21621 Critical 21621 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21621 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Azure SQL Database Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in Azure SQL Database allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SQL Database Microsoft No CVE-2026-68789 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 21621 Elevation of Privilege 21621 Critical 21621 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21621 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Office Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-68792 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11573 11574 11762 11763 11952 11953 12420 12421 Elevation of Privilege 11573 Elevation of Privilege 11574 Elevation of Privilege 11762 Elevation of Privilege 11763 Elevation of Privilege 11952 Elevation of Privilege 11953 Elevation of Privilege 12420 Elevation of Privilege 12421 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68793 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68794 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Critical 10836 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10739 Critical 10740 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous <a href="https://x.com/lmksecurity">Jeongmin Choi</a> with <a href="https://s2w.inc/ko">S2W</a> 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-17T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68795 Stack-based Buffer Overflow 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> <a href="https://www.linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68796 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-10-07T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68797 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68798 Heap-based Buffer Overflow 21368 Remote Code Execution 21368 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> Anonymous <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.2 2026-10-16T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-09-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68799 Use of Uninitialized Resource 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68800 Heap-based Buffer Overflow 21368 Remote Code Execution 21368 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68801 Heap-based Buffer Overflow 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Anonymous 1.1 2026-08-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68802 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68803 Access of Resource Using Incompatible Type ('Type Confusion') 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68804 Numeric Truncation Error Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Critical 10836 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10739 Critical 10740 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 yhw &amp; txz <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> 1.3 2026-10-05T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.1 2026-09-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.2 2026-09-24T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68805 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68806 Out-of-bounds Write 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68807 Heap-based Buffer Overflow 21368 Remote Code Execution 21368 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes yhw &amp; txz <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), UIUC</a> <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), UIUC</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), UIUC</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68808 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Powerpoint Information Disclosure Vulnerability <p>Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-68809 Incomplete Cleanup 11573 11574 11762 11763 11952 11953 12420 12421 10741 10742 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 10741 Information Disclosure 10742 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10741 Important 10742 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10741 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10742 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002899 https://www.microsoft.com/en-us/download/details.aspx?id=108782 10741 10742 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002899 10741 10742 5002899 Andrey Shcherbina 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68810 Untrusted Pointer Dereference 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68811 Access of Resource Using Incompatible Type ('Type Confusion') 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68812 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-15T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68813 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68814 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68815 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> <a href="https://x.com/gr4ss341">grass</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68816 Stack-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Critical 10836 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10739 Critical 10740 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-68817 Stack-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 <a href="https://x.com/lmksecurity">Jeongmin Choi</a> with <a href="https://s2w.inc/ko">S2W</a> 1.1 2026-08-27T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Network File System Denial of Service Vulnerability <p>Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.</p> Windows Network File System Microsoft Yes CVE-2026-68819 Buffer Over-read 11568 11569 11571 11572 11923 11924 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11924 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Linzishan, Anemone and Zhiniang Peng with HUST <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-26T07:00:00 <p>Acknowledgement Updated</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>A locally authenticated attacker could run a specially crafted application on an affected system to trigger a race condition. Successful exploitation could allow the attacker to gain SYSTEM privileges. User interaction is not required.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-68820 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 David Driker with Checkpoint Moshe Marelus with Checkpoint 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Package Manager Elevation of Privilege Vulnerability <p>Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Package Manager Microsoft Yes CVE-2026-68821 Improper Privilege Management 11981 Elevation of Privilege 11981 Important 11981 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11981 Release Notes https://github.com/microsoft/winget-cli/releases/download/v1.29.280/Microsoft.DesktopAppInstaller_8wekyb3d8bbwe.msixbundle 11981 No Security Update 1.29.279 https://github.com/microsoft/winget-cli/releases/tag/v1.29.280 11981 Release Notes <a href="https://www.linkedin.com/in/bilal-teke/">Bilal Teke</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-14T07:00:00 <p>Acknowledgement Updated</p> 1.2 2026-08-29T07:00:00 <p>Changes made to the security updates links and information. This is an informational change only.</p> Azure Confidential Ledger Remote Code Execution Vulnerability <p>Exposed dangerous method or function in Azure Confidential Ledger allows an authorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Confidential Ledger Microsoft No CVE-2026-68823 Exposed Dangerous Method or Function 21625 Remote Code Execution 21625 Critical 21625 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21625 XBREACH TEAM with https://xbreach.ai/ 1.0 2026-08-06T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the Visual Studio Code Workspace Trust feature, allowing content from an untrusted workspace to run commands or code without the user first granting trust. See <a href="https://code.visualstudio.com/docs/editor/workspace-trust">Workspace Trust</a> for more information.</p> Visual Studio Code Microsoft Yes CVE-2026-69278 Incorrect Authorization Protection Mechanism Failure 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://github.com/samer666569">陳宥升 (CheN..)</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass the network access restrictions enforced for the Visual Studio Code agent, allowing outbound connections to resources that the configured policy is intended to block.</p> Visual Studio Code Microsoft Yes CVE-2026-69306 Not Failing Securely ('Failing Open') 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://puh4ck3rx.github.io/">PuH4ck3rX</a> with W&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could craft a malicious link or web page and use social engineering to convince a user to open it in Visual Studio Code. Successful exploitation could result in code execution in the user's connected development environment. User interaction is required to open the attacker-supplied link, and no authentication is needed.</p> Visual Studio Code Microsoft Yes CVE-2026-69320 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://x.com/zemnmez">Thomas Neil James Shadwell (zemnmez)</a> with <a href="https://openai.com/">OpenAI</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Azure Logic Apps Elevation of Privilege Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Logic Apps Microsoft No CVE-2026-69400 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 12228 Elevation of Privilege 12228 Critical 12228 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12228 Haakon Gulbrandsrud with <a href="https://binarysecurity.no/">Binary Security</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Defender Elevation of Privilege Vulnerability <p>Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as &quot;ShieldBreak &quot;.</p> <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>Last version of the Microsoft Malware Protection Engine affected by this vulnerability</td> <td>1.26070.7</td> </tr> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>1.1.26080.3</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> Microsoft Defender Microsoft Yes CVE-2026-69414 Improper Link Resolution Before File Access ('Link Following') 11902 Elevation of Privilege 11902 Important 11902 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 7.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C 11902 Release Notes 11902 Maybe Security Update 1.1.26080.3 https://www.microsoft.com/en-us/wdsi/defenderupdates 11902 Release Notes Anonymous 1.1 2026-08-19T07:00:00 <p>CWE added. Informational change only.</p> 2.0 2026-09-03T07:00:00 <p>Microsoft has released an update to the Microsoft Malware Protection Engine that addresses the vulnerability identified by CVE-2026-69414. Please see the FAQ for more information on how to check if the new version has been installed.</p> 1.0 2026-08-14T07:00:00 <p>Information published.</p> Azure Data Manager for Energy Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Azure Data Manager for Energy allows an authorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Data Manager for Energy Microsoft No CVE-2026-69419 Integer Overflow or Wraparound 21731 Remote Code Execution 21731 Critical 21731 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21731 Anonymous 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-69446 Incorrect Authorization 11655 Elevation of Privilege 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No 4.4 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Maliq Barnard with <a href="https://farpsec.xyz/">FarpSec</a> 1.0 2026-08-28T07:00:00 <p>Information published.</p> 1.1 2026-10-30T07:00:00 <p>Corrected CVE by adding the assigning CNA. This is an informational change only.</p> Azure SQL Database Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure SQL Database Microsoft No CVE-2026-69502 Server-Side Request Forgery (SSRF) 21621 Elevation of Privilege 21621 Critical 21621 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C 21621 <a href="https://www.linkedin.com/in/sharathunni">Sharath Unni</a> 1.1 2026-08-20T07:00:00 <p>Added Azure SQL Database to the Affected Products table. Informational change only.</p> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Azure Stack HCI Information Disclosure Vulnerability <p>Observable response discrepancy in Azure Stack HCI allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Stack HCI Microsoft No CVE-2026-69519 Observable Response Discrepancy 12394 Information Disclosure 12394 Critical 12394 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.6 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:P/RL:O/RC:C 12394 <a href="https://www.linkedin.com/in/hay-mizrachi/">Hay Mizrachi</a> with <a href="https://microsoft.com/">Microsoft</a> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Azure Virtual Machines Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Azure Virtual Machines allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Virtual Machines Microsoft No CVE-2026-69543 Server-Side Request Forgery (SSRF) 12218 Elevation of Privilege 12218 Critical 12218 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12218 Nick Wojciechowski 1.0 2026-08-20T07:00:00 <p>Information published.</p> Windows App for Mac Information Disclosure Vulnerability <p>Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of initialized or uninitialized memory in the process heap.</p> Windows App for Mac Microsoft Yes CVE-2026-69550 Buffer Over-read 20847 Information Disclosure 20847 Important 20847 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 20847 20847 Maybe Security Update 11.3.9 https://go.microsoft.com/fwlink/?linkid=868963 20847 <a href="https://linkedin.com/in/zoltanharmath">Zoltan Harmath</a> with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-27T07:00:00 <p>Updated CWE value. This is an informational change only.</p> Azure Arc Elevation of Privilege Vulnerability <p>Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Arc Microsoft No CVE-2026-69555 Incorrect Authorization 12068 Elevation of Privilege 12068 Critical 12068 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 12068 Gal Azaria with Microsoft 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Partner Center Information Disclosure Vulnerability <p>Authorization bypass through user-controlled key in Microsoft Partner Center allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Partner Center Microsoft No CVE-2026-69558 Authorization Bypass Through User-Controlled Key 12429 Information Disclosure 12429 Critical 12429 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.6 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 12429 Lucas Gayk with Microsoft 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Entra ID Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Entra ID Microsoft No CVE-2026-69836 Deserialization of Untrusted Data 12383 Remote Code Execution 12383 Critical 12383 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 10.0 8.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12383 Robert Fitzaptrick with Microsoft Robert Fitzaptrick with Microsoft Anonymous 1.0 2026-08-20T07:00:00 <p>Information published.</p> 1.1 2026-08-21T07:00:00 <p>Corrected <strong>Exploited</strong> to <strong>No</strong>. This vulnerability was not exploited in the wild. This is an informational change only.</p> Microsoft Entra ID Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Azure Active Directory allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Active Directory Microsoft No CVE-2026-69851 Server-Side Request Forgery (SSRF) 12383 Elevation of Privilege 12383 Critical 12383 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12383 Anonymous 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Copilot in Azure Information Disclosure Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Copilot in Azure allows an authorized attacker to disclose information over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Copilot in Azure Microsoft No CVE-2026-69855 Server-Side Request Forgery (SSRF) 21733 Information Disclosure 21733 Critical 21733 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.7 6.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 21733 Sam 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Word Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-70105 Improper Input Validation 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 1.1 2026-08-20T07:00:00 <p>Information published. This CVE was addressed by updates that were released in August 2026, but the CVE was inadvertently omitted from the August 2026 Security Updates. This is an informational change only. Customers who have already installed the August 2026 updates do not need to take any further action.</p> 1.0 2026-08-20T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> Microsoft Office Microsoft Yes CVE-2026-70130 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Anonymous yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows DNS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-70304 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could send a specially crafted URL to an authenticated SharePoint user and persuade them to visit it and submit the form. Successful exploitation could allow the attacker to run script in the user's SharePoint session, potentially accessing information or modifying site content.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70306 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Bui Xuan Quang (buxu) with Ncsgroup.vn <a href="https://smlijun.github.io/">DongJun Kim</a> with UIUC <a href="https://hwiwonl.ee/">Hwiwon Lee (hwiwonl)</a> with UIUC <a href="https://nevul37.github.io/">Jongseong Kim (nevul37)</a> with UIUC 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-70307 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Owen McCullough with MSRC V&amp;M 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability <p>Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An unauthenticated attacker is able to bypass the expected user access.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-70309 Origin Validation Error 11655 Security Feature Bypass 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.65 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://twitter.com/orange_8361">Orange Tsai (@orange_8361)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-08-28T07:00:00 <p>Information published.</p> Microsoft Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Word Microsoft Yes CVE-2026-70310 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-10-07T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Office Word Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-70311 Use After Free 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Important 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Powerpoint Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70312 Improper Input Validation 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 Information Disclosure 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Important 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft PowerPoint Remote Code Execution Vulnerability <p>Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70313 Improper Input Validation 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 Information Disclosure 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Important 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-70314 Improper Input Validation 11951 12440 11953 11573 11762 11952 12420 11763 12421 11574 21368 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 11953 Information Disclosure 11573 Information Disclosure 11762 Information Disclosure 11952 Information Disclosure 12420 Information Disclosure 11763 Information Disclosure 12421 Information Disclosure 11574 Information Disclosure 21368 Important 11951 Important 12440 Important 11953 Important 11573 Important 11762 Important 11952 Important 12420 Important 11763 Important 12421 Important 11574 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Click to Run 11953 11573 11762 11952 12420 11763 12421 11574 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11953 11573 11762 11952 12420 11763 12421 11574 Click to Run Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-70315 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Powerpoint Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70316 Improper Input Validation 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-70317 Use of Uninitialized Resource 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002897 https://www.microsoft.com/en-us/download/details.aspx?id=108781 10753 10754 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002897 10753 10754 5002897 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-70318 Improper Input Validation 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002901 https://www.microsoft.com/en-us/download/details.aspx?id=108769 10746 10747 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002901 10746 10747 5002901 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Word Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-70319 Improper Input Validation 11951 12440 11573 11574 11952 12420 11953 11763 12421 11762 21368 Information Disclosure 11951 Information Disclosure 12440 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11952 Information Disclosure 12420 Information Disclosure 11953 Information Disclosure 11763 Information Disclosure 12421 Information Disclosure 11762 Information Disclosure 21368 Important 11951 Important 12440 Important 11573 Important 11574 Important 11952 Important 12420 Important 11953 Important 11763 Important 12421 Important 11762 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Click to Run 11573 11574 11952 12420 11953 11763 12421 11762 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11952 12420 11953 11763 12421 11762 Click to Run Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Powerpoint Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70320 Improper Input Validation 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker the ability to gain remote code execution via an in-network attacker calling arbitrary endpoints.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70321 Deserialization of Untrusted Data 11961 Remote Code Execution 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Kn1ght 1.0 2026-08-11T07:00:00 <p>Information published.</p> Powerpoint Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70322 Improper Input Validation 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-70323 Improper Input Validation 11573 11574 12420 11952 11953 12421 11763 11762 21368 11951 12440 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 12420 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12421 Information Disclosure 11763 Information Disclosure 11762 Information Disclosure 21368 Information Disclosure 11951 Information Disclosure 12440 Important 11573 Important 11574 Important 12420 Important 11952 Important 11953 Important 12421 Important 11763 Important 11762 Important 21368 Important 11951 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 Click to Run 11573 11574 12420 11952 11953 12421 11763 11762 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 12420 11952 11953 12421 11763 11762 Click to Run Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>If the successful attacker only could view some sensitive information, how is this an elevation of privilege vulnerability?</strong></p> <p>In some cases, the exposed sensitive information could provide access to internal networks.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70324 Server-Side Request Forgery (SSRF) 10950 11585 11961 Elevation of Privilege 10950 Elevation of Privilege 11585 Elevation of Privilege 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002905 https://www.microsoft.com/en-us/download/details.aspx?id=108758 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002905 10950 5002905 5002906 https://www.microsoft.com/en-us/download/details.aspx?id=108776 10950 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002906 10950 5002906 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://www.linkedin.com/in/mateusz-mto-gierblinski/">Mateusz Gierblinski</a> with <a href="https://www.curios-it.eu/">Curios</a> <a href="https://www.linkedin.com/in/marios-gyftos-a6b62122/">MARIOS GYFTOS</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-24T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Powerpoint Information Disclosure Vulnerability <p>Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-70325 Improper Input Validation 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70326 Server-Side Request Forgery (SSRF) 11961 Elevation of Privilege 11961 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 Kn1ght 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-70327 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Information Disclosure 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-70328 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Information Disclosure 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.112.26081010 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.112.26081010 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002903 https://www.microsoft.com/en-us/download/details.aspx?id=108780 10739 10740 Maybe Security Update 16.0.5565.1001 https://support.microsoft.com/help/5002903 10739 10740 5002903 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Outlook Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Outlook Microsoft Yes CVE-2026-70329 Integer Overflow or Wraparound 11573 11574 11762 11763 11952 11953 12420 12421 10765 10766 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10765 Remote Code Execution 10766 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10765 Important 10766 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10765 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10766 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002755 https://www.microsoft.com/en-us/download/details.aspx?id=108768 10765 10766 Maybe Security Update 16.0.5565.1000 https://support.microsoft.com/help/5002755 10765 10766 5002755 0ccbbf129444eb66344ccafb92b00df4 Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-27T07:00:00 <p>Acknowledgement Updated</p> Windows DNS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-70330 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.7 5.8 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 Rajesh Kumar 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Edge for iOS Spoofing Vulnerability <p>Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> Microsoft Edge for iOS Microsoft Yes CVE-2026-70331 Improper Neutralization of Input Used for LLM Prompting 11655 11966 Tampering 11655 Tampering 11966 Moderate 11655 Moderate 11966 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11966 Release Notes 11655 11966 No Security Update 150.0.4078.50 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 11966 Release Notes Ofek Levin with <a href="https://enclave.ai/">Enclave</a> 1.0 2026-08-28T07:00:00 <p>Information published.</p> Microsoft Office SharePoint Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Office SharePoint Microsoft No CVE-2026-70332 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 20446 Spoofing 20446 Critical 20446 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20446 <a href="https://www.linkedin.com/in/keanunys/">Keanu Nys</a> with Spotit 1.0 2026-08-06T07:00:00 <p>Information published.</p> GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could embed malicious instructions in content that the AI agent processes, such as a web page, a repository file, or a tool response. When a user runs the agent against that content, the injected instructions could cause the agent to run commands on the user's machine without prompting for confirmation. Successful exploitation could allow the attacker to execute code in the context of the signed-in user. User interaction is required and the attack is carried out locally; no authentication is required for the attacker to supply the content.</p> GitHub Copilot and Visual Studio Code Microsoft Yes CVE-2026-70335 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') 11622 Elevation of Privilege 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://www.linkedin.com/in/tarek-nakkouch/">Tarek Nakkouch</a> Daniel Weglowski 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.2 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could craft a malicious link or web page and use social engineering to convince a user to open it in Visual Studio Code. Successful exploitation could result in code execution in the user's connected development environment. User interaction is required to open the attacker-supplied link, and no authentication is needed.</p> Visual Studio Code Microsoft Yes CVE-2026-70336 Improper Control of Generation of Code ('Code Injection') 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 No Security Update 1.132.1 https://code.visualstudio.com/updates/v1_132 11622 Release Notes <a href="https://www.linkedin.com/in/william-conlon-0489b910b/">William Conlon</a> with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-09-02T07:00:00 <p>Affected software updated with new package information.</p> Microsoft PowerShell Remote Code Execution Vulnerability <p>Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious server and convince a user to connect to it from an affected client. When the client processes the server's response, the attacker could execute code on the client system. User interaction is required.</p> Microsoft PowerShell Core Microsoft Yes CVE-2026-70337 Relative Path Traversal Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely <a href="https://www.linkedin.com/in/charlievogt">Charlie Vogt</a> Anonymous <a href="https://x.com/hasanfleyah">Hasan Flayyih Abdullah</a> <a href="https://x.com/0x7m_d">0hmz</a> f7d8c52bec79e42795cf15888b85cbad xboy <a href="https://x.com/theteatoast">Anindya Roy</a> <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a> <a href="https://www.linkedin.com/in/moathaloufi/">Moath Aloufi</a> xboy <a href="https://www.linkedin.com/in/mohit-negi-b9b5711a2y">Mohit_Negi</a> with <a href="https://bugcrowd.com/mohit_negi">Bugcrowd</a> <a href="https://www.linkedin.com/in/jiheun-kim/">l8BL</a> with <a href="https://enki.co.kr/">ENKI WhiteHat</a> <a href="https://www.twitter.com/0xmanan">Manan Patel</a> <a href="https://x.com/ayatoshitomi">Ayato Shitomi</a> <a href="https://www.linkedin.com/in/navaponpremkasem/">71C4</a> 2.4 2026-10-20T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 2.0 2026-08-14T07:00:00 <p>The security updates for Powershell have been updated.</p> 2.1 2026-08-17T07:00:00 <p>Acknowledgement Updated</p> 2.3 2026-08-28T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.2 2026-08-25T07:00:00 <p>Acknowledgement Updated</p> Microsoft PowerShell Security Feature Bypass Vulnerability <p>Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Windows Defender Application Control and PowerShell Constrained Language Mode restrictions, allowing untrusted code to run with capabilities those protections are designed to block.</p> Microsoft PowerShell Microsoft Yes CVE-2026-70338 Improper Control of Generation of Code ('Code Injection') 12262 16787 21227 Security Feature Bypass 12262 Security Feature Bypass 16787 Security Feature Bypass 21227 Important 12262 Important 16787 Important 21227 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12262 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16787 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21227 https://github.com/PowerShell/PowerShell/releases/tag/v7.4.19 12262 Maybe Security Update 7.4.19.0 12262 https://github.com/PowerShell/PowerShell/releases/tag/v7.5.10 16787 Maybe Security Update 7.5.10.0 16787 https://github.com/PowerShell/PowerShell/releases/tag/v7.6.5 21227 Maybe Security Update 7.6.5 21227 <a href="https://x.com/ayatoshitomi">Ayato Shitomi</a> <a href="https://www.linkedin.com/in/charlievogt">Charlie Vogt</a> Coşkun Bağrıa&#231;ık 陳宥升 (CheN..) https://github.com/samer666569 MinhNV5 with <a href="https://mbbank.com.vn/">MBBank</a> <a href="https://www.ymsora.com/">YMsora</a> 2.0 2026-08-14T07:00:00 <p>The security updates for Powershell have been updated.</p> 2.1 2026-08-18T07:00:00 <p>Acknowledgement Updated</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> 2.2 2026-08-19T07:00:00 <p>Acknowledgement Updated</p> 2.3 2026-10-26T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a victim to perform a specific action, such as copying files or executing a command, and for an attacker with appropriate access to have pre-planted malicious files with knowledge of where they should be placed on the victim's system.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.78</td> <td>08/11/2026</td> <td>151.0.7922.109</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-70339 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 151.0.4129.78 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-08-11T07:00:00 <p>Information published.</p> Azure CycleCloud Elevation of Privilege Vulnerability <p>Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated user who has the Cluster Creator role could exploit this vulnerability by using a cluster creation operation in a way that bypasses an authorization check. By doing so, the attacker could overwrite another user’s cluster, including a cluster owned by an administrator, and take ownership of it.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain full control of the affected cluster that was overwritten and taken over. This could allow the attacker to run unauthorized code, remove or alter credentials associated with the cluster, and perform actions with the same level of access available within that cluster.</p> Azure CycleCloud Microsoft Yes CVE-2026-70340 Missing Authorization 21547 Elevation of Privilege 21547 Important 21547 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 21547 Release Notes https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/upgrade-and-migrate?view=cyclecloud-8 21547 No Security Update 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes XBREACH.AI TEAM with https://xbreach.ai/ 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker who already has the ability to execute JavaScript in the affected Microsoft Edge process could trigger the vulnerability through specially crafted activity. Successful exploitation could allow the attacker to execute code beyond the browser's security scope.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>To successfully exploit this vulnerability, an attacker would need existing ability to execute Javascript in the impacted process.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-70341 Use After Free 11966 11815 12480 21776 21777 11655 21955 Remote Code Execution 11966 Remote Code Execution 11815 Remote Code Execution 12480 Remote Code Execution 21776 Remote Code Execution 21777 Remote Code Execution 11655 Remote Code Execution 21955 Important 11966 Important 11815 Important 12480 Important 21776 Important 21777 Important 11655 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11966 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11815 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12480 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21776 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes 11966 11815 12480 21776 21777 11655 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11966 11815 12480 21776 21777 11655 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-08-28T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-70344 Stack-based Buffer Overflow Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely Anonymous Anonymous 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-70345 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-70346 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Installer Microsoft Yes CVE-2026-70347 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 11929 11930 11931 Yes Security Update 10.0.19044.7663 https://support.microsoft.com/help/5120249 11929 11930 11931 5120249 5120249 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120249 5087544 12097 12098 12099 Yes Security Update 10.0.19045.7663 https://support.microsoft.com/help/5120249 12097 12098 12099 5120249 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5120240 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120240 5099414 12242 12243 Yes Security Update 10.0.22631.7517 https://support.microsoft.com/help/5120240 12242 12243 5120240 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 5082198 10852 10853 10816 10855 Yes Security Update 10.0.14393.9418 https://support.microsoft.com/help/5120418 10852 10853 10816 10855 5120418 5120386 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120386 5099445 10378 10379 Yes Monthly Rollup 6.2.9200.26280 https://support.microsoft.com/help/5120386 10378 10379 5120386 5120385 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120385 5099444 10483 10543 Yes Monthly Rollup 6.3.9600.23338 https://support.microsoft.com/help/5120385 10483 10543 5120385 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Management Services Denial of Service Vulnerability <p>Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.</p> Windows Management Services Microsoft Yes CVE-2026-70348 Improper Link Resolution Before File Access ('Link Following') 20437 20438 12389 12390 20853 20854 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 20853 Denial of Service 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 20437 20438 Yes Security Update 10.0.26200.9168 https://support.microsoft.com/help/5121003 20437 20438 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 20437 20438 Yes Security Hotpatch Update 10.0.26200.9106 https://support.microsoft.com/help/5120994 20437 20438 5120994 5121003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121003 5101650 12389 12390 Yes Security Update 10.0.26100.9168 https://support.microsoft.com/help/5121003 12389 12390 5121003 5120994 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120994 12389 12390 Yes Security Hotpatch Update 10.0.26100.9106 https://support.microsoft.com/help/5120994 12389 12390 5120994 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 k0shl 1.0 2026-08-11T07:00:00 <p>Information published.</p> 1.1 2026-08-12T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> .NET Core Remote Code Execution Vulnerability <p>Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.</p> .NET Microsoft Yes CVE-2026-70354 Out-of-bounds Write 11723-10852 2472-10378 2472-10379 2472-20854 2472-10483 11723-10853 2472-10543 11723-10816 11676-11568 11677-11568 11677-11570 11723-10855 11676-11569 11677-11571 11677-11572 11677-11569 11676-11570 11676-11571 11676-12097 11676-11924 11676-11929 11676-11572 11676-11923 11676-11931 11676-11930 11676-12098 11676-12099 12079-11931 12079-11924 12079-11923 12079-12098 12079-11930 12079-12097 12079-11929 12079-12099 11863-10543 11863-10379 11650-10855 11650-10378 11863-10483 11650-10853 11650-10852 11650-10816 11650-10379 21681 16767 12434 12414 20837 2472-20853 12079-12437 12079-20438 12079-12390 12079-12389 12079-12242 12079-20437 12079-12243 11863-10378 12079-12436 11650-10543 11650-10483 12078-20853 12078-20854 Remote Code Execution 11723-10852 Remote Code Execution 2472-10378 Remote Code Execution 2472-10379 Remote Code Execution 2472-20854 Remote Code Execution 2472-10483 Remote Code Execution 11723-10853 Remote Code Execution 2472-10543 Remote Code Execution 11723-10816 Remote Code Execution 11676-11568 Remote Code Execution 11677-11568 Remote Code Execution 11677-11570 Remote Code Execution 11723-10855 Remote Code Execution 11676-11569 Remote Code Execution 11677-11571 Remote Code Execution 11677-11572 Remote Code Execution 11677-11569 Remote Code Execution 11676-11570 Remote Code Execution 11676-11571 Remote Code Execution 11676-12097 Remote Code Execution 11676-11924 Remote Code Execution 11676-11929 Remote Code Execution 11676-11572 Remote Code Execution 11676-11923 Remote Code Execution 11676-11931 Remote Code Execution 11676-11930 Remote Code Execution 11676-12098 Remote Code Execution 11676-12099 Remote Code Execution 12079-11931 Remote Code Execution 12079-11924 Remote Code Execution 12079-11923 Remote Code Execution 12079-12098 Remote Code Execution 12079-11930 Remote Code Execution 12079-12097 Remote Code Execution 12079-11929 Remote Code Execution 12079-12099 Remote Code Execution 11863-10543 Remote Code Execution 11863-10379 Remote Code Execution 11650-10855 Remote Code Execution 11650-10378 Remote Code Execution 11863-10483 Remote Code Execution 11650-10853 Remote Code Execution 11650-10852 Remote Code Execution 11650-10816 Remote Code Execution 11650-10379 Remote Code Execution 21681 Remote Code Execution 16767 Remote Code Execution 12434 Remote Code Execution 12414 Remote Code Execution 20837 Remote Code Execution 2472-20853 Remote Code Execution 12079-12437 Remote Code Execution 12079-20438 Remote Code Execution 12079-12390 Remote Code Execution 12079-12389 Remote Code Execution 12079-12242 Remote Code Execution 12079-20437 Remote Code Execution 12079-12243 Remote Code Execution 11863-10378 Remote Code Execution 12079-12436 Remote Code Execution 11650-10543 Remote Code Execution 11650-10483 Remote Code Execution 12078-20853 Remote Code Execution 12078-20854 Important 11723-10852 Important 2472-10378 Important 2472-10379 Important 2472-20854 Important 2472-10483 Important 11723-10853 Important 2472-10543 Important 11723-10816 Important 11676-11568 Important 11677-11568 Important 11677-11570 Important 11723-10855 Important 11676-11569 Important 11677-11571 Important 11677-11572 Important 11677-11569 Important 11676-11570 Important 11676-11571 Important 11676-12097 Important 11676-11924 Important 11676-11929 Important 11676-11572 Important 11676-11923 Important 11676-11931 Important 11676-11930 Important 11676-12098 Important 11676-12099 Important 12079-11931 Important 12079-11924 Important 12079-11923 Important 12079-12098 Important 12079-11930 Important 12079-12097 Important 12079-11929 Important 12079-12099 Important 11863-10543 Important 11863-10379 Important 11650-10855 Important 11650-10378 Important 11863-10483 Important 11650-10853 Important 11650-10852 Important 11650-10816 Important 11650-10379 Important 21681 Important 16767 Important 12434 Important 12414 Important 20837 Important 2472-20853 Important 12079-12437 Important 12079-20438 Important 12079-12390 Important 12079-12389 Important 12079-12242 Important 12079-20437 Important 12079-12243 Important 11863-10378 Important 12079-12436 Important 11650-10543 Important 11650-10483 Important 12078-20853 Important 12078-20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11723-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21681 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20837 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 5120418 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120418 11723-10852 11723-10853 11723-10816 11723-10855 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 & 4.7.4144.0 https://support.microsoft.com/help/5120418 11723-10852 11723-10853 11723-10816 11723-10855 5120418 5120716 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120716 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 https://support.microsoft.com/help/5120716 2472-10378 2472-10379 5120716 5120747 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120747 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 https://support.microsoft.com/help/5120747 2472-20854 2472-20853 5120747 5120695 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120695 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8984 & 3.0.30729.8980 https://support.microsoft.com/help/5120695 2472-10483 2472-10543 5120695 5120703 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120703 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.8.4805.0 https://support.microsoft.com/help/5120703 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 5120703 5120698 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120698 11677-11568 11677-11570 11677-11571 11677-11572 11677-11569 Maybe Security Update 2.0.50727.9070 & 3.0.30729.9068 & 4.7.4144.0 https://support.microsoft.com/help/5120698 11677-11568 11677-11570 11677-11571 11677-11572 11677-11569 5120698 5120701 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120701 11676-12097 11676-11929 11676-11931 11676-11930 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0 https://support.microsoft.com/help/5120701 11676-12097 11676-11929 11676-11931 11676-11930 11676-12098 11676-12099 5120701 5120705 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120705 11676-11924 11676-11923 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.4805.0 https://support.microsoft.com/help/5120705 11676-11924 11676-11923 5120705 5120709 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120709 12079-11931 12079-12098 12079-11930 12079-12097 12079-11929 12079-12099 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120709 12079-11931 12079-12098 12079-11930 12079-12097 12079-11929 12079-12099 5120709 5120714 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120714 12079-11924 12079-11923 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120714 12079-11924 12079-11923 5120714 5120700 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120700 11863-10543 11863-10483 Maybe Security Update 4.7.4144.0 https://support.microsoft.com/help/5120700 11863-10543 11863-10483 5120700 5120699 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120699 11863-10379 11863-10378 Maybe Security Update 4.7.4144.0 https://support.microsoft.com/help/5120699 11863-10379 11863-10378 5120699 5120702 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120702 11650-10855 11650-10853 11650-10852 11650-10816 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120702 11650-10855 11650-10853 11650-10852 11650-10816 5120702 5120704 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120704 11650-10378 11650-10379 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120704 11650-10378 11650-10379 5120704 21681 Security Update 18.8.3 21681 16767 Security Update 17.14.38 16767 5122105 https://dotnet.microsoft.com/download/dotnet/9.0 12434 Maybe Security Update 9.0.19 https://support.microsoft.com/help/5122105 12434 5122105 5122104 https://dotnet.microsoft.com/download/dotnet/8.0 12414 Maybe Security Update 8.0.30 https://support.microsoft.com/help/5122104 12414 5122104 5122106 https://dotnet.microsoft.com/download/dotnet/10.0 20837 Maybe Security Update 10.0.11 https://support.microsoft.com/help/5122106 20837 5122106 5120708 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120708 12079-12437 12079-20438 12079-20437 12079-12436 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9344.0 https://support.microsoft.com/help/5120708 12079-12437 12079-20438 12079-20437 12079-12436 5120708 5120710 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120710 12079-12390 12079-12389 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120710 12079-12390 12079-12389 5120710 5120713 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120713 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9183 & 3.0.30729.9169 & 4.8.9343.0 https://support.microsoft.com/help/5120713 12079-12242 12079-12243 5120713 5120706 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120706 11650-10543 11650-10483 Maybe Security Update 4.8.4805.0 https://support.microsoft.com/help/5120706 11650-10543 11650-10483 5120706 5120711 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120711 12078-20853 12078-20854 Maybe Security Update 4.8.9344.0 https://support.microsoft.com/help/5120711 12078-20853 12078-20854 5120711 <a href="https://x.com/ky0tofu">Ky0toFu</a> 2.0 2026-08-13T07:00:00 <p>Removed Linux and macOS products from the Affected Software table. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Elevation of Privilege Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>Successful exploitation could allow an attacker to run script in the security context of the affected SharePoint user and perform actions permitted to that user.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-70355 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11585 11961 Elevation of Privilege 11585 Elevation of Privilege 11961 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.3 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N 11585 7.3 7.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N 11961 5002894 https://www.microsoft.com/en-us/download/details.aspx?id=108774 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002894 11585 5002894 5002896 https://www.microsoft.com/en-us/download/details.aspx?id=108773 11585 Maybe Security Update 16.0.10417.20198 https://support.microsoft.com/help/5002896 11585 5002896 5002893 https://www.microsoft.com/en-us/download/details.aspx?id=108767 11961 Maybe Security Update 16.0.19725.20522 https://support.microsoft.com/help/5002893 11961 5002893 <a href="https://th.linkedin.com/in/navaponpremkasem">Navapon Premkasem</a> <a href="https://www.linkedin.com/in/thimphaching-phengphavanh-458949219/">Thimphaching Phengphavanh</a> <a href="https://www.linkedin.com/in/songsit-srisura/">Songsit Srisura</a> <a href="https://www.linkedin.com/in/prawee-lertprasertphan">0x00</a> <a href="https://www.linkedin.com/in/jattawatt-buranasant-891783107/">Jattawatt Buranasant</a> <a href="https://www.linkedin.com/in/supawee-foitong/">Supawee Foitong</a> P1hcn 1.0 2026-08-11T07:00:00 <p>Information published.</p> Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending a specially crafted packet to an affected service over the network. Successful exploitation could allow the attacker to execute code on the target system. No authentication or user interaction is required..</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Device Health Attestation (DHA) Microsoft Yes CVE-2026-71331 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 12437 12436 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 12437 Remote Code Execution 12436 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11924 Critical 12437 Critical 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5120238 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120238 5082123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9121 https://support.microsoft.com/help/5120238 11568 11569 11571 11572 5120238 5120242 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120242 5082142 11923 11924 Yes Security Update 10.0.20348.5499 https://support.microsoft.com/help/5120242 11923 11924 5120242 5120242 https://support.microsoft.com/help/5120242 11923 11924 5120229 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120229 11923 11924 Yes Security Hotpatch Update 10.0.20348.5440 https://support.microsoft.com/help/5120229 11923 11924 5120229 5120233 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120233 5099536 12437 12436 Yes Security Update 10.0.26100.33296 https://support.microsoft.com/help/5120233 12437 12436 5120233 5120233 https://support.microsoft.com/help/5120233 12437 12436 5120228 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5120228 12437 12436 Yes Security Hotpatch Update 10.0.26100.33222 https://support.microsoft.com/help/5120228 12437 12436 5120228 5120228 https://support.microsoft.com/help/5120228 12437 12436 Anonymous 1.1 2026-08-20T07:00:00 <p>Corrected the Executive Summary to clarify that the vulnerability affects Windows Device Health Attestation (DHA), not Microsoft Azure Attestation. This is an informational change only.</p> 1.2 2026-08-20T07:00:00 <p>Updated links to security updates. This is an informational change only.</p> 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a victim to perform a specific action, such as copying files or executing a command, and for an attacker with appropriate access to have pre-planted malicious files with knowledge of where they should be placed on the victim's system.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>151.0.4129.86</td> <td>08/14/2026</td> <td>151.0.7922.138</td> </tr> </tbody> </table> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), and some loss of availability (A:L). What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view sensitive information, a token in this scenario (Confidentiality) and make changes to disclosed information (Integrity), and they might be able to force a crash within the server (Availability).</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-72970 Heap-based Buffer Overflow 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 151.0.4129.86 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://x.com/eternalsakura13">Nan Wang(@eternalsakura13) and Ziling Chen</a> 1.0 2026-08-14T07:00:00 <p>Information published.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability <p>Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-72971 Improper Link Resolution Before File Access ('Link Following') 20853 20854 Tampering 20853 Tampering 20854 Important 20853 Important 20854 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5121000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5121000 5101649 20853 20854 Yes Security Update 10.0.28000.2704 https://support.microsoft.com/help/5121000 20853 20854 5121000 yhw &amp; txz 1.0 2026-08-11T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could host a specially crafted webpage and convince a user to visit it using an affected version of Microsoft Edge. Successful exploitation could allow the attacker to execute code within the browser renderer process. User interaction is required.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-72984 Access of Resource Using Incompatible Type ('Type Confusion') 11655 12480 21777 11815 11966 21776 21955 Remote Code Execution 11655 Remote Code Execution 12480 Remote Code Execution 21777 Remote Code Execution 11815 Remote Code Execution 11966 Remote Code Execution 21776 Remote Code Execution 21955 Important 11655 Important 12480 Important 21777 Important 11815 Important 11966 Important 21776 Important 21955 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12480 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11815 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11966 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21776 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21955 Release Notes 11655 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Release Notes 12480 21777 11815 11966 21776 Security Update 152.0.4191.52 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 12480 21777 11815 11966 21776 Release Notes Release Notes https://catalog.update.microsoft.com/Search.aspx?q=Edge-Stable 21955 Security Update 152.0.4191.53 https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 21955 Release Notes <a href="https://x.com/rewhiles">Nguyen Thanh Dat</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> 1.0 2026-08-28T07:00:00 <p>Information published.</p> Chromium: CVE-2026-76033 Inappropriate implementation in CORS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76033 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:06 <p>Information published.</p> Chromium: CVE-2026-76034 Buffer overflow in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76034 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:10 <p>Information published.</p> Chromium: CVE-2026-76035 Inappropriate implementation in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76035 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:12 <p>Information published.</p> Chromium: CVE-2026-76037 Link following in CredentialProvider <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76037 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:15 <p>Information published.</p> Chromium: CVE-2026-76038 Type confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76038 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:18 <p>Information published.</p> Chromium: CVE-2026-76040 Use after free in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76040 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:20 <p>Information published.</p> Chromium: CVE-2026-76041 Information leak in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76041 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:23 <p>Information published.</p> Chromium: CVE-2026-76042 Use of uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76042 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:26 <p>Information published.</p> Chromium: CVE-2026-76043 Incorrect calculation in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76043 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:28 <p>Information published.</p> Chromium: CVE-2026-76044 Race condition in USB <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76044 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:31 <p>Information published.</p> Chromium: CVE-2026-76045 Use after free in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76045 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:34 <p>Information published.</p> Chromium: CVE-2026-76047 Type confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>51.0.4129.101</td> <td>08/20/2026</td> <td>151.0.7922.170</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-76047 11655 11655 11655 Release Notes 11655 No Security Update 151.0.4129.101 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-20T22:10:37 <p>Information published.</p> Chromium: CVE-2026-78891 Buffer overflow in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78891 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:41:43 <p>Information published.</p> Chromium: CVE-2026-78892 Incorrect authorization in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78892 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:41:48 <p>Information published.</p> Chromium: CVE-2026-78893 Information leak in QUIC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78893 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:41:53 <p>Information published.</p> Chromium: CVE-2026-78894 Race condition in Payments <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78894 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:41:58 <p>Information published.</p> Chromium: CVE-2026-78895 Information leak in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78895 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:03 <p>Information published.</p> Chromium: CVE-2026-78896 Information leak in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78896 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:08 <p>Information published.</p> Chromium: CVE-2026-78897 Missing authorization in BrowserTag <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78897 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:12 <p>Information published.</p> Chromium: CVE-2026-78898 Incorrect authorization in Downloads <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78898 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:18 <p>Information published.</p> Chromium: CVE-2026-78899 Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78899 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:23 <p>Information published.</p> Chromium: CVE-2026-78900 Improper input validation in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78900 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:28 <p>Information published.</p> Chromium: CVE-2026-78901 Race condition in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78901 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:32 <p>Information published.</p> Chromium: CVE-2026-78903 Incomplete cleanup in SiteIsolation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78903 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:37 <p>Information published.</p> Chromium: CVE-2026-78904 Type confusion in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78904 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:41 <p>Information published.</p> Chromium: CVE-2026-78905 Type confusion in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78905 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:46 <p>Information published.</p> Chromium: CVE-2026-78906 Race condition in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78906 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:51 <p>Information published.</p> Chromium: CVE-2026-78907 Incorrect authorization in WebProtect <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78907 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:42:56 <p>Information published.</p> Chromium: CVE-2026-78908 Information leak in Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78908 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:01 <p>Information published.</p> Chromium: CVE-2026-78909 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78909 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:05 <p>Information published.</p> Chromium: CVE-2026-78910 Buffer overflow in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78910 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:10 <p>Information published.</p> Chromium: CVE-2026-78911 Incorrect authorization in USB <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78911 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:15 <p>Information published.</p> Chromium: CVE-2026-78912 UI misrepresentation in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78912 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:19 <p>Information published.</p> Chromium: CVE-2026-78913 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78913 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:24 <p>Information published.</p> Chromium: CVE-2026-78914 Uninitialized resource in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78914 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:29 <p>Information published.</p> Chromium: CVE-2026-78915 Race condition in Enterprise <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78915 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:33 <p>Information published.</p> Chromium: CVE-2026-78934 Race condition in ReadAloud <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78934 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:38 <p>Information published.</p> Chromium: CVE-2026-78938 Type confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78938 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:44 <p>Information published.</p> Chromium: CVE-2026-78939 Use after free in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78939 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:49 <p>Information published.</p> Chromium: CVE-2026-78940 Improper initialization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78940 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:53 <p>Information published.</p> Chromium: CVE-2026-78941 Information leak in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78941 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:58 <p>Information published.</p> Chromium: CVE-2026-78942 Incorrect reference resolution in Loader <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78942 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:03 <p>Information published.</p> Chromium: CVE-2026-78943 Improper input validation in Editing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78943 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:08 <p>Information published.</p> Chromium: CVE-2026-78944 Use after free in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78944 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:13 <p>Information published.</p> Chromium: CVE-2026-78945 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78945 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:18 <p>Information published.</p> Chromium: CVE-2026-78946 Incorrect authorization in Select <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78946 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:22 <p>Information published.</p> Chromium: CVE-2026-78947 Incomplete cleanup in Chromium <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78947 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:27 <p>Information published.</p> Chromium: CVE-2026-78948 Buffer overflow in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78948 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:31 <p>Information published.</p> Chromium: CVE-2026-78950 Integer overflow in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78950 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:36 <p>Information published.</p> Chromium: CVE-2026-78951 Use after free in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78951 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:41 <p>Information published.</p> Chromium: CVE-2026-78952 Out of bounds write in Crashpad <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78952 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:46 <p>Information published.</p> Chromium: CVE-2026-78953 Missing authorization in SiteIsolation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78953 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:50 <p>Information published.</p> Chromium: CVE-2026-78954 Incorrect authorization in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78954 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:56 <p>Information published.</p> Chromium: CVE-2026-78955 Observable discrepancy in PerformanceAPIs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78955 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:01 <p>Information published.</p> Chromium: CVE-2026-78956 Type confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78956 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:07 <p>Information published.</p> Chromium: CVE-2026-78958 Uninitialized resource in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78958 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:13 <p>Information published.</p> Chromium: CVE-2026-78959 Improper handling of case sensitivity in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78959 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:18 <p>Information published.</p> Chromium: CVE-2026-78960 Information leak in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78960 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:23 <p>Information published.</p> Chromium: CVE-2026-78961 Incorrect authorization in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78961 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:27 <p>Information published.</p> Chromium: CVE-2026-78962 Uninitialized resource in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78962 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:32 <p>Information published.</p> Chromium: CVE-2026-78963 Improper input validation in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78963 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:36 <p>Information published.</p> Chromium: CVE-2026-78964 Use after free in Sync <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78964 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:41 <p>Information published.</p> Chromium: CVE-2026-78965 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78965 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:46 <p>Information published.</p> Chromium: CVE-2026-78966 Externally controlled reference in QUIC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78966 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:53 <p>Information published.</p> Chromium: CVE-2026-78967 Missing authorization in BFCache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78967 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:58 <p>Information published.</p> Chromium: CVE-2026-78968 Missing authorization in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78968 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:03 <p>Information published.</p> Chromium: CVE-2026-78969 Uninitialized resource in Video <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78969 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:10 <p>Information published.</p> Chromium: CVE-2026-78974 UI misrepresentation in Linux Toolkit Theming <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78974 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:04 <p>Information published.</p> Chromium: CVE-2026-78975 Incorrect authorization in DOM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78975 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:11 <p>Information published.</p> Chromium: CVE-2026-78976 Improper input validation in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78976 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:18 <p>Information published.</p> Chromium: CVE-2026-78977 Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78977 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:23 <p>Information published.</p> Chromium: CVE-2026-78978 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78978 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:28 <p>Information published.</p> Chromium: CVE-2026-78979 Race condition in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78979 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:32 <p>Information published.</p> Chromium: CVE-2026-78980 Improper input validation in ReaderMode <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78980 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:37 <p>Information published.</p> Chromium: CVE-2026-78983 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78983 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:42 <p>Information published.</p> Chromium: CVE-2026-78984 Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78984 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:48 <p>Information published.</p> Chromium: CVE-2026-78985 Incorrect reference resolution in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78985 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:53 <p>Information published.</p> Chromium: CVE-2026-78986 Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78986 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:58 <p>Information published.</p> Chromium: CVE-2026-78987 Information leak in Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78987 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:03 <p>Information published.</p> Chromium: CVE-2026-78989 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78989 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:08 <p>Information published.</p> Chromium: CVE-2026-78990 Use after free in Compositing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78990 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:14 <p>Information published.</p> Chromium: CVE-2026-78991 Race condition in WebProtect <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78991 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:18 <p>Information published.</p> Chromium: CVE-2026-78999 Improper privilege management in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-78999 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:25 <p>Information published.</p> Chromium: CVE-2026-79000 Improper input validation in DeviceBoundSessionCredentials <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79000 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:30 <p>Information published.</p> Chromium: CVE-2026-79001 Information leak in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79001 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:36 <p>Information published.</p> Chromium: CVE-2026-79002 Incorrect authorization in SiteIsolation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79002 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:41 <p>Information published.</p> Chromium: CVE-2026-79003 Incorrect authorization in Device <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79003 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:46 <p>Information published.</p> Chromium: CVE-2026-79004 Out of bounds read in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79004 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:51 <p>Information published.</p> Chromium: CVE-2026-79005 Incorrect authorization in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79005 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:56 <p>Information published.</p> Chromium: CVE-2026-79006 Protection mechanism failure in HttpsUpgrades <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79006 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:00 <p>Information published.</p> Chromium: CVE-2026-79007 Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79007 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:04 <p>Information published.</p> Chromium: CVE-2026-79009 UI misrepresentation in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79009 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:09 <p>Information published.</p> Chromium: CVE-2026-79010 Operation on a resource after expiration or release in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79010 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:14 <p>Information published.</p> Chromium: CVE-2026-79011 UI misrepresentation in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79011 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:18 <p>Information published.</p> Chromium: CVE-2026-79012 Use after free in Safebrowsing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79012 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:24 <p>Information published.</p> Chromium: CVE-2026-79013 Improper input validation in Sync <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79013 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:29 <p>Information published.</p> Chromium: CVE-2026-79014 Race condition in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79014 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:33 <p>Information published.</p> Chromium: CVE-2026-79015 Improper input validation in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79015 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:38 <p>Information published.</p> Chromium: CVE-2026-79016 Observable discrepancy in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79016 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:43 <p>Information published.</p> Chromium: CVE-2026-79017 Race condition in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79017 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:49 <p>Information published.</p> Chromium: CVE-2026-79018 Information leak in FoldableAPIs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79018 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:54 <p>Information published.</p> Chromium: CVE-2026-79019 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79019 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:05 <p>Information published.</p> Chromium: CVE-2026-79020 Out of bounds read in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79020 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:12 <p>Information published.</p> Chromium: CVE-2026-79021 Missing authorization in InterestGroups <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79021 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:18 <p>Information published.</p> Chromium: CVE-2026-79022 UI misrepresentation in Transactions Platform <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79022 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:23 <p>Information published.</p> Chromium: CVE-2026-79023 Incorrect authorization in Editing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79023 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:27 <p>Information published.</p> Chromium: CVE-2026-79024 Information leak in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79024 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:32 <p>Information published.</p> Chromium: CVE-2026-79025 Improper input validation in Workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79025 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:08 <p>Information published.</p> Chromium: CVE-2026-79026 Use after free in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79026 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:13 <p>Information published.</p> Chromium: CVE-2026-79027 Use after free in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79027 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:19 <p>Information published.</p> Chromium: CVE-2026-79028 Observable discrepancy in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79028 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:24 <p>Information published.</p> Chromium: CVE-2026-79030 Observable discrepancy in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79030 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:32 <p>Information published.</p> Chromium: CVE-2026-79031 Improper resource exposure in Preload <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79031 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:18 <p>Information published.</p> Chromium: CVE-2026-79032 Improper input validation in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79032 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:24 <p>Information published.</p> Chromium: CVE-2026-79033 Insufficient control flow management in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79033 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:28 <p>Information published.</p> Chromium: CVE-2026-79034 Information leak in CORS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79034 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:35 <p>Information published.</p> Chromium: CVE-2026-79038 Incorrect authorization in WebProtect <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79038 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:41 <p>Information published.</p> Chromium: CVE-2026-79040 Uninitialized resource in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79040 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:47 <p>Information published.</p> Chromium: CVE-2026-79041 Missing authorization in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79041 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:51 <p>Information published.</p> Chromium: CVE-2026-79042 Missing authorization in Payments <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79042 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:43:56 <p>Information published.</p> Chromium: CVE-2026-79043 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79043 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:02 <p>Information published.</p> Chromium: CVE-2026-79045 Type confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79045 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:07 <p>Information published.</p> Chromium: CVE-2026-79047 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79047 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:13 <p>Information published.</p> Chromium: CVE-2026-79048 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79048 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:20 <p>Information published.</p> Chromium: CVE-2026-79049 Incorrect reference resolution in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79049 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:24 <p>Information published.</p> Chromium: CVE-2026-79050 Incorrect authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79050 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:30 <p>Information published.</p> Chromium: CVE-2026-79051 Incorrect authorization in Loader <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79051 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:36 <p>Information published.</p> Chromium: CVE-2026-79052 Use after free in Aura <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79052 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:42 <p>Information published.</p> Chromium: CVE-2026-79053 Missing authorization in Lighthouse <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79053 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:48 <p>Information published.</p> Chromium: CVE-2026-79054 Use after free in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79054 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:55 <p>Information published.</p> Chromium: CVE-2026-79055 Information leak in Sharing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79055 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:00 <p>Information published.</p> Chromium: CVE-2026-79056 Use after free in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79056 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:07 <p>Information published.</p> Chromium: CVE-2026-79058 Missing authorization in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79058 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:13 <p>Information published.</p> Chromium: CVE-2026-79059 Information leak in BFCache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79059 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:19 <p>Information published.</p> Chromium: CVE-2026-79060 Incorrect authorization in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79060 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:24 <p>Information published.</p> Chromium: CVE-2026-79064 Use after free in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79064 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:28 <p>Information published.</p> Chromium: CVE-2026-79065 Improper input validation in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79065 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:33 <p>Information published.</p> Chromium: CVE-2026-79066 Improper input validation in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79066 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:38 <p>Information published.</p> Chromium: CVE-2026-79067 Missing authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79067 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:45 <p>Information published.</p> Chromium: CVE-2026-79068 Improper resource exposure in StreamsAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79068 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:51 <p>Information published.</p> Chromium: CVE-2026-79069 Memory corruption in Tint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79069 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:57 <p>Information published.</p> Chromium: CVE-2026-79070 Incorrect reference resolution in Cache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79070 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:02 <p>Information published.</p> Chromium: CVE-2026-79071 Race condition in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79071 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:08 <p>Information published.</p> Chromium: CVE-2026-79072 Improper state validation in Performance <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79072 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:13 <p>Information published.</p> Chromium: CVE-2026-79073 Improper state validation in Parser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79073 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:07 <p>Information published.</p> Chromium: CVE-2026-79074 Information leak in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79074 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:13 <p>Information published.</p> Chromium: CVE-2026-79075 Information leak in Geolocation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79075 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:20 <p>Information published.</p> Chromium: CVE-2026-79076 Improper input validation in Sync <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79076 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:25 <p>Information published.</p> Chromium: CVE-2026-79077 Incorrect authorization in WebProtect <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79077 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:31 <p>Information published.</p> Chromium: CVE-2026-79078 Use after free in FedCM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79078 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:36 <p>Information published.</p> Chromium: CVE-2026-79082 Incorrect authorization in Transactions Platform <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79082 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:42 <p>Information published.</p> Chromium: CVE-2026-79083 Improper enforcement of behavioral workflow in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79083 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:47 <p>Information published.</p> Chromium: CVE-2026-79084 Inadequate encryption strength in Notifications <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79084 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:52 <p>Information published.</p> Chromium: CVE-2026-79085 Missing authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79085 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:56 <p>Information published.</p> Chromium: CVE-2026-79087 Injection in Chrome Tabs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79087 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:01 <p>Information published.</p> Chromium: CVE-2026-79088 Incorrect authorization in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79088 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:06 <p>Information published.</p> Chromium: CVE-2026-79089 Race condition in Transactions Platform <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79089 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:11 <p>Information published.</p> Chromium: CVE-2026-79090 Improper privilege management in Actor <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79090 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:16 <p>Information published.</p> Chromium: CVE-2026-79091 Use after free in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79091 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:22 <p>Information published.</p> Chromium: CVE-2026-79093 Incorrect authorization in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79093 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:28 <p>Information published.</p> Chromium: CVE-2026-79094 Race condition in Workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79094 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:33 <p>Information published.</p> Chromium: CVE-2026-79095 Information leak in Payments <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79095 11655 11655 11655 Release Notes 11655 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> Chromium: CVE-2026-79097 Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79097 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:39 <p>Information published.</p> Chromium: CVE-2026-79098 UI misrepresentation in PermissionElement <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79098 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:44 <p>Information published.</p> Chromium: CVE-2026-79099 Missing authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79099 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:49 <p>Information published.</p> Chromium: CVE-2026-79103 Incorrect reference resolution in Speech <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79103 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:55 <p>Information published.</p> Chromium: CVE-2026-79104 Missing authorization in Sensor <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79104 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:01 <p>Information published.</p> Chromium: CVE-2026-79106 Improper input validation in Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79106 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:07 <p>Information published.</p> Chromium: CVE-2026-79107 Incorrect authorization in TabGroups <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79107 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:13 <p>Information published.</p> Chromium: CVE-2026-79108 UI misrepresentation in Web Authentication (Passkeys & Security Keys) <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79108 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:18 <p>Information published.</p> Chromium: CVE-2026-79109 Improper input validation in Printing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79109 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:23 <p>Information published.</p> Chromium: CVE-2026-79110 Missing authorization in Preload <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79110 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:28 <p>Information published.</p> Chromium: CVE-2026-79111 Improper input validation in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79111 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:33 <p>Information published.</p> Chromium: CVE-2026-79112 Out of bounds read in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79112 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:38 <p>Information published.</p> Chromium: CVE-2026-79116 Missing authorization in Viz <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79116 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:43 <p>Information published.</p> Chromium: CVE-2026-79118 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79118 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:48 <p>Information published.</p> Chromium: CVE-2026-79119 Use after free in PDF <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79119 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:54 <p>Information published.</p> Chromium: CVE-2026-79120 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79120 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:03 <p>Information published.</p> Chromium: CVE-2026-79121 Improper input validation in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79121 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:09 <p>Information published.</p> Chromium: CVE-2026-79122 Information leak in SignIn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79122 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:15 <p>Information published.</p> Chromium: CVE-2026-79123 Improper input validation in NTP Footer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79123 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:21 <p>Information published.</p> Chromium: CVE-2026-79124 Information leak in Intents <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79124 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:26 <p>Information published.</p> Chromium: CVE-2026-79125 Information leak in XR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79125 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:30 <p>Information published.</p> Chromium: CVE-2026-79126 Incorrect provision of specified functionality in Proxy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79126 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:10 <p>Information published.</p> Chromium: CVE-2026-79127 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79127 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:17 <p>Information published.</p> Chromium: CVE-2026-79128 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79128 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:21 <p>Information published.</p> Chromium: CVE-2026-79130 Buffer overflow in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79130 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:30 <p>Information published.</p> Chromium: CVE-2026-79131 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79131 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:35 <p>Information published.</p> Chromium: CVE-2026-79133 Incorrect authorization in Forms <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79133 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:43 <p>Information published.</p> Chromium: CVE-2026-79134 Incorrect authorization in GetUserMedia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79134 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:48 <p>Information published.</p> Chromium: CVE-2026-79136 Incorrect authorization in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79136 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:53 <p>Information published.</p> Chromium: CVE-2026-79137 Incorrect authorization in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79137 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:57 <p>Information published.</p> Chromium: CVE-2026-79138 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79138 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:01 <p>Information published.</p> Chromium: CVE-2026-79139 Improper input validation in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79139 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:06 <p>Information published.</p> Chromium: CVE-2026-79140 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79140 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:11 <p>Information published.</p> Chromium: CVE-2026-79141 Incorrect authorization in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79141 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:18 <p>Information published.</p> Chromium: CVE-2026-79142 Buffer overflow in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79142 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:23 <p>Information published.</p> Chromium: CVE-2026-79143 Incorrect authorization in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79143 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:28 <p>Information published.</p> Chromium: CVE-2026-79144 Information leak in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79144 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:32 <p>Information published.</p> Chromium: CVE-2026-79147 Information leak in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79147 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:37 <p>Information published.</p> Chromium: CVE-2026-79148 Off-by-one error in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79148 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:41 <p>Information published.</p> Chromium: CVE-2026-79149 Use after free in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79149 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:46 <p>Information published.</p> Chromium: CVE-2026-79150 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79150 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:50 <p>Information published.</p> Chromium: CVE-2026-79151 Improper input validation in Safebrowsing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79151 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:55 <p>Information published.</p> Chromium: CVE-2026-79154 Missing authorization in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79154 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:59 <p>Information published.</p> Chromium: CVE-2026-79155 Race condition in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79155 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:04 <p>Information published.</p> Chromium: CVE-2026-79173 UI misrepresentation in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79173 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:08 <p>Information published.</p> Chromium: CVE-2026-79174 Incorrect authorization in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79174 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:13 <p>Information published.</p> Chromium: CVE-2026-79175 Type confusion in Accessibility <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79175 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:17 <p>Information published.</p> Chromium: CVE-2026-79176 UI misrepresentation in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79176 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:21 <p>Information published.</p> Chromium: CVE-2026-79177 Incorrect authorization in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79177 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:26 <p>Information published.</p> Chromium: CVE-2026-79178 Incorrect authorization in Web Authentication (Passkeys & Security Keys) <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79178 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:30 <p>Information published.</p> Chromium: CVE-2026-79179 Incorrect authorization in DOM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79179 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:36 <p>Information published.</p> Chromium: CVE-2026-79181 Observable discrepancy in Glic <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79181 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:44:56 <p>Information published.</p> Chromium: CVE-2026-79182 Improper input validation in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79182 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:03 <p>Information published.</p> Chromium: CVE-2026-79183 Use after free in Accessibility <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79183 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:10 <p>Information published.</p> Chromium: CVE-2026-79184 Missing authorization in Preload <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79184 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:17 <p>Information published.</p> Chromium: CVE-2026-79185 Information leak in DOM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79185 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:22 <p>Information published.</p> Chromium: CVE-2026-79186 Incorrect authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79186 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:27 <p>Information published.</p> Chromium: CVE-2026-79187 Use after free in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79187 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:32 <p>Information published.</p> Chromium: CVE-2026-79188 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79188 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:38 <p>Information published.</p> Chromium: CVE-2026-79189 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79189 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:45 <p>Information published.</p> Chromium: CVE-2026-79190 Incorrect authorization in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79190 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:50 <p>Information published.</p> Chromium: CVE-2026-79191 Incorrect authorization in SiteIsolation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79191 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:45:56 <p>Information published.</p> Chromium: CVE-2026-79192 Improper input validation in Variations <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79192 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:02 <p>Information published.</p> Chromium: CVE-2026-79193 Information leak in Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79193 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:08 <p>Information published.</p> Chromium: CVE-2026-79194 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79194 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:46:15 <p>Information published.</p> Chromium: CVE-2026-79195 Use after free in Script <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79195 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:08 <p>Information published.</p> Chromium: CVE-2026-79196 Race condition in Editing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79196 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:16 <p>Information published.</p> Chromium: CVE-2026-79197 Use after free in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79197 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:22 <p>Information published.</p> Chromium: CVE-2026-79198 Use after free in Platform <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79198 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:29 <p>Information published.</p> Chromium: CVE-2026-79199 Incorrect authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79199 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:37 <p>Information published.</p> Chromium: CVE-2026-79200 Use after free in Aura <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79200 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:44 <p>Information published.</p> Chromium: CVE-2026-79201 Improper access control in Workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79201 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:52 <p>Information published.</p> Chromium: CVE-2026-79202 Use after free in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79202 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:47:59 <p>Information published.</p> Chromium: CVE-2026-79203 Improper input validation in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79203 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:04 <p>Information published.</p> Chromium: CVE-2026-79204 UI misrepresentation in Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79204 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:09 <p>Information published.</p> Chromium: CVE-2026-79205 Incorrect authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79205 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:15 <p>Information published.</p> Chromium: CVE-2026-79206 Out of bounds read in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79206 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:22 <p>Information published.</p> Chromium: CVE-2026-79208 Missing authorization in HTTP2 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79208 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:27 <p>Information published.</p> Chromium: CVE-2026-79209 Type confusion in Animation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79209 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:32 <p>Information published.</p> Chromium: CVE-2026-79211 Incorrect authorization in USB <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79211 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:38 <p>Information published.</p> Chromium: CVE-2026-79212 Missing authorization in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79212 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:44 <p>Information published.</p> Chromium: CVE-2026-79214 Improper input validation in Preload <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79214 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:50 <p>Information published.</p> Chromium: CVE-2026-79215 Integer overflow in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79215 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:48:55 <p>Information published.</p> Chromium: CVE-2026-79216 Buffer overflow in Blink <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79216 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:00 <p>Information published.</p> Chromium: CVE-2026-79218 Incorrect authorization in Sandbox <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79218 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:06 <p>Information published.</p> Chromium: CVE-2026-79219 Use after free in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79219 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:11 <p>Information published.</p> Chromium: CVE-2026-79220 Information leak in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79220 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:17 <p>Information published.</p> Chromium: CVE-2026-79221 Uninitialized resource in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79221 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:22 <p>Information published.</p> Chromium: CVE-2026-79223 Integer overflow in Chromium <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79223 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:27 <p>Information published.</p> Chromium: CVE-2026-79224 Use after free in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79224 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:31 <p>Information published.</p> Chromium: CVE-2026-79225 Incorrect authorization in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79225 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:36 <p>Information published.</p> Chromium: CVE-2026-79226 Improper privilege management in Regional Capabilities <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79226 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:41 <p>Information published.</p> Chromium: CVE-2026-79227 Type confusion in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79227 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:47 <p>Information published.</p> Chromium: CVE-2026-79228 Incorrect authorization in SiteIsolation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79228 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:52 <p>Information published.</p> Chromium: CVE-2026-79229 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79229 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:49:57 <p>Information published.</p> Chromium: CVE-2026-79230 Improper input validation in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79230 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:06 <p>Information published.</p> Chromium: CVE-2026-79231 Buffer overflow in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79231 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:13 <p>Information published.</p> Chromium: CVE-2026-79232 Use after free in Aura <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79232 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:20 <p>Information published.</p> Chromium: CVE-2026-79234 Injection in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79234 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:25 <p>Information published.</p> Chromium: CVE-2026-79235 Use after free in WebGL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79235 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:29 <p>Information published.</p> Chromium: CVE-2026-79236 Type confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79236 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:50:35 <p>Information published.</p> Chromium: CVE-2026-79237 Incorrect authorization in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79237 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:02 <p>Information published.</p> Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79238 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:07 <p>Information published.</p> Chromium: CVE-2026-79239 Out of bounds read in Tint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79239 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:13 <p>Information published.</p> Chromium: CVE-2026-79240 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79240 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:19 <p>Information published.</p> Chromium: CVE-2026-79242 Observable discrepancy in HTML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79242 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:24 <p>Information published.</p> Chromium: CVE-2026-79243 Improper input validation in ReadingList <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79243 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:33 <p>Information published.</p> Chromium: CVE-2026-79244 Use after free in Animation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79244 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:38 <p>Information published.</p> Chromium: CVE-2026-79245 Use after free in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79245 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:45 <p>Information published.</p> Chromium: CVE-2026-79246 Information leak in DataTransfer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79246 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:50 <p>Information published.</p> Chromium: CVE-2026-79247 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79247 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:51:55 <p>Information published.</p> Chromium: CVE-2026-79248 Incorrect authorization in Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79248 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:00 <p>Information published.</p> Chromium: CVE-2026-79249 Code injection in Bisection <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79249 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:05 <p>Information published.</p> Chromium: CVE-2026-79250 UI misrepresentation in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79250 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:10 <p>Information published.</p> Chromium: CVE-2026-79251 Improper input validation in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79251 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:15 <p>Information published.</p> Chromium: CVE-2026-79252 Information leak in ServiceWorker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79252 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:22 <p>Information published.</p> Chromium: CVE-2026-79253 Improper input validation in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79253 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:27 <p>Information published.</p> Chromium: CVE-2026-79255 Improper input validation in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79255 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:32 <p>Information published.</p> Chromium: CVE-2026-79257 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79257 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:37 <p>Information published.</p> Chromium: CVE-2026-79258 Incorrect authorization in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79258 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:42 <p>Information published.</p> Chromium: CVE-2026-79259 Improper input validation in Safebrowsing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79259 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:47 <p>Information published.</p> Chromium: CVE-2026-79260 Improper input validation in Cookies <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79260 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:52 <p>Information published.</p> Chromium: CVE-2026-79261 Incorrect authorization in Controls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79261 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:52:56 <p>Information published.</p> Chromium: CVE-2026-79262 Incorrect authorization in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79262 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:01 <p>Information published.</p> Chromium: CVE-2026-79263 Race condition in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79263 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:05 <p>Information published.</p> Chromium: CVE-2026-79264 Incorrect reference resolution in Preload <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79264 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:11 <p>Information published.</p> Chromium: CVE-2026-79265 Incomplete cleanup in GetUserMedia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79265 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:15 <p>Information published.</p> Chromium: CVE-2026-79266 Use after free in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79266 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:20 <p>Information published.</p> Chromium: CVE-2026-79267 Race condition in Workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79267 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:25 <p>Information published.</p> Chromium: CVE-2026-79269 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79269 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:30 <p>Information published.</p> Chromium: CVE-2026-79270 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79270 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:34 <p>Information published.</p> Chromium: CVE-2026-79271 Information leak in DOM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79271 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:39 <p>Information published.</p> Chromium: CVE-2026-79272 Improper input validation in FindInPage <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79272 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:43 <p>Information published.</p> Chromium: CVE-2026-79274 Information leak in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79274 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:48 <p>Information published.</p> Chromium: CVE-2026-79275 Use after free in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79275 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:53 <p>Information published.</p> Chromium: CVE-2026-79276 Improper privilege management in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79276 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:53:57 <p>Information published.</p> Chromium: CVE-2026-79283 UI misrepresentation in Geometry <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79283 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:02 <p>Information published.</p> Chromium: CVE-2026-79284 UI misrepresentation in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79284 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:09 <p>Information published.</p> Chromium: CVE-2026-79285 Uninitialized resource in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79285 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:14 <p>Information published.</p> Chromium: CVE-2026-79287 Observable discrepancy in Forms <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79287 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:19 <p>Information published.</p> Chromium: CVE-2026-79289 Improper control of a resource through its lifetime in Workers <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79289 11655 21955 11655 21955 11655 Low 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:23 <p>Information published.</p> Chromium: CVE-2026-79290 Use after free in Aura <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79290 11655 21955 11655 21955 11655 Critical 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:29 <p>Information published.</p> Chromium: CVE-2026-79291 Information leak in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79291 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:34 <p>Information published.</p> Chromium: CVE-2026-79292 Integer overflow in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79292 11655 21955 11655 21955 11655 Important 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:39 <p>Information published.</p> Chromium: CVE-2026-79293 Information leak in Animation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>152.0.4191.53</td> <td>08/28/2026</td> <td>152.0.7977.64/.65</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-79293 11655 21955 11655 21955 11655 Moderate 21955 Release Notes 11655 21955 No Security Update 152.0.4191.53 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 21955 Release Notes 1.0 2026-08-28T07:00:00 <p>Information published.</p> 2.0 2026-10-28T01:54:44 <p>Information published.</p> urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage Mariner GitHub_M Yes CVE-2026-55553 Exposure of Sensitive Information to an Unauthorized Actor 0-17084 0-17084 Important 0-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 0-17084 Release Notes 0-17084 Security Update https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 0-17084 Release Notes 1.0 2026-10-21T01:02:27 <p>Information published.</p> nvme-apple: Prevent shared tags across queues on Apple A11 Mariner Linux Yes CVE-2026-72131 21932-17084 21932-17084 Moderate 21932-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21932-17084 Release Notes 21932-17084 Security Update 6.6.158.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21932-17084 Release Notes 3.0 2026-10-13T17:46:43 <p>Information published.</p> 4.0 2026-10-15T02:41:05 <p>Information published.</p> 1.0 2026-10-04T01:04:12 <p>Information published.</p> 2.0 2026-10-06T01:48:43 <p>Information published.</p> Unbounded Memory Growth in QUIC Server Incoming Channel Queue Mariner openssl Yes CVE-2026-14456 Allocation of Resources Without Limits or Throttling 21789-17084 21789-17084 Important 21789-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21789-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21789-17084 Security Update 21789-17084 3.0 2026-09-05T01:49:32 <p>Information published.</p> 1.0 2026-08-20T22:00:14 <p>Information published.</p> 2.0 2026-09-04T01:03:33 <p>Information published.</p> An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c: main() component Mariner mitre Yes CVE-2026-52491 21762-17084 21762-17084 Important 21762-17084 9.4 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L/E:U 21762-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21762-17084 Security Update 21762-17084 1.0 2026-08-29T01:08:33 <p>Information published.</p> 2.0 2026-09-05T01:49:32 <p>Information published.</p> An integer overflow in the libtiff rgb2ycbcr utility's cvtRaster() function when computing strip buffer sizes can result in an undersized heap allocation and subsequent heap-based buffer overflow during YCbCr conversion of a crafted TIFF image Mariner mitre Yes CVE-2026-52492 21762-17084 21762-17084 Moderate 21762-17084 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U 21762-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21762-17084 Security Update 21762-17084 2.0 2026-09-07T01:50:10 <p>Information published.</p> 1.0 2026-08-27T01:13:15 <p>Information published.</p> Client-Side Memory Leak in OCSP Response Checking Mariner openssl Yes CVE-2026-54876 Missing Release of Memory after Effective Lifetime 21767-17084 21789-17084 21767-17084 21789-17084 Important 21767-17084 Important 21789-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21767-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21789-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21789-17084 Security Update 21789-17084 1.0 2026-08-09T01:03:06 <p>Information published.</p> 2.0 2026-08-10T01:43:33 <p>Information published.</p> 5.0 2026-09-07T01:52:01 <p>Information published.</p> 3.0 2026-08-14T18:01:24 <p>Information published.</p> 3.0 2026-08-14T18:01:22 <p>Information published.</p> 4.0 2026-09-02T01:03:28 <p>Information published.</p> gitoxide gix-packetline before 0.21.5 Denial of Service Mariner VulnCheck Yes CVE-2026-82250 Integer Underflow (Wrap or Wraparound) 21716-17084 21500-17084 21716-17084 21500-17084 Moderate 21716-17084 Moderate 21500-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21716-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21500-17084 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21500-17084 Security Update 21500-17084 2.0 2026-09-07T01:56:11 <p>Information published.</p> 1.0 2026-09-02T01:06:08 <p>Information published.</p> qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer property Mariner harborist Yes CVE-2026-82417 Uncaught Exception 19693-17084 19693-17084 Moderate 19693-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 19693-17084 1.0 2026-09-02T01:05:07 <p>Information published.</p> thunderbolt: Bound the DROM dual link port number before indexing sw->ports Mariner Linux Yes CVE-2026-74585 21684-17084 21684-17084 Moderate 21684-17084 4.6 4.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21684-17084 1.0 2026-08-24T01:06:11 <p>Information published.</p> 2.0 2026-08-24T14:49:15 <p>Information published.</p> staging: rtl8723bs: validate monitor transmit frame lengths Mariner Linux Yes CVE-2026-74648 21684-17084 21684-17084 Moderate 21684-17084 5.6 5.6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H 21684-17084 2.0 2026-08-24T14:48:56 <p>Information published.</p> 1.0 2026-08-24T01:05:52 <p>Information published.</p> staging: rtl8723bs: fix missing shared-key auth challenge length check Mariner Linux Yes CVE-2026-74649 21684-17084 21684-17084 Important 21684-17084 8.3 8.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H 21684-17084 1.0 2026-08-24T01:05:14 <p>Information published.</p> 2.0 2026-08-24T14:48:29 <p>Information published.</p> staging: rtl8723bs: fix OOB read in rtw_get_wpa_ie() Mariner Linux Yes CVE-2026-74651 21684-17084 21684-17084 Moderate 21684-17084 5.4 5.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21684-17084 2.0 2026-08-24T14:48:45 <p>Information published.</p> 1.0 2026-08-24T01:05:40 <p>Information published.</p> usb: gadget: f_ncm: Use unsigned int for ndp_index Mariner Linux Yes CVE-2026-74679 21684-17084 21684-17084 Low 21684-17084 2.4 2.4 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21684-17084 2.0 2026-08-24T14:49:49 <p>Information published.</p> 1.0 2026-08-24T01:06:42 <p>Information published.</p> soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read Mariner Linux Yes CVE-2026-74729 21684-17084 21684-17084 Moderate 21684-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H 21684-17084 1.0 2026-08-24T01:06:48 <p>Information published.</p> 2.0 2026-08-24T14:49:54 <p>Information published.</p> Denial of Service via HDF5 Shape Bomb in keras.models.load_model() in keras-team/keras Mariner @huntr_ai Yes CVE-2026-12570 Allocation of Resources Without Limits or Throttling 21265-17084 21265-17084 Moderate 21265-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H 21265-17084 1.0 2026-08-14T19:03:07 <p>Information published.</p> s390/zcrypt: Validate length for CCA ECC private key requests Mariner Linux Yes CVE-2026-68451 21684-17084 21684-17084 Important 21684-17084 8.8 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21684-17084 1.0 2026-08-14T19:13:36 <p>Information published.</p> s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Mariner Linux Yes CVE-2026-68453 21684-17084 21684-17084 Important 21684-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21684-17084 1.0 2026-08-14T19:12:51 <p>Information published.</p> KVM: s390: pci: Fix handling of AIF enable without AISB Mariner Linux Yes CVE-2026-68454 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.150.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-08-14T19:15:01 <p>Information published.</p>