July 2026 Security Updates Security Update secure@microsoft.com The Microsoft Security Response Center (MSRC) identifies, monitors, resolves, and responds to security incidents and Microsoft software security vulnerabilities. For more information, see http://www.microsoft.com/security/msrc. 2026-Jul 2026-Jul Final 1.0 507 2026-07-22T01:41:55 July 2026 Security Updates 2026-07-14T07:00:00 2026-07-22T01:41:55 <h2 id="this-release-consists-of-628-microsoft-cves">This release consists of 628 Microsoft CVEs:</h2> <table> <thead> <tr> <th>Product Family</th> <th>Updates per Product/Version</th> <th>Vulnerabilities Addressed</th> <th>Distinct Updates</th> <th>Type of Update</th> </tr> </thead> <tbody> <tr> <td>Azure</td> <td>1</td> <td>11</td> <td>13</td> <td>Individual</td> </tr> <tr> <td>Defender</td> <td>1</td> <td>5</td> <td>2</td> <td>Cumulative</td> </tr> <tr> <td>Developer Tools</td> <td>1</td> <td>27</td> <td>36</td> <td>Cumulative</td> </tr> <tr> <td>Exchange Server</td> <td>1</td> <td>5</td> <td>4</td> <td>Cumulative</td> </tr> <tr> <td>Microsoft Edge</td> <td>1</td> <td>47</td> <td>1</td> <td>Cumulative</td> </tr> <tr> <td>Office</td> <td>1</td> <td>82</td> <td>10</td> <td>Cumulative (except 2016)</td> </tr> <tr> <td>Office 2016</td> <td>1</td> <td>82</td> <td>18</td> <td>Individual</td> </tr> <tr> <td>Other</td> <td>1</td> <td>5</td> <td>4</td> <td>Individual</td> </tr> <tr> <td>SharePoint Server</td> <td>1</td> <td>17</td> <td>3</td> <td>Cumulative</td> </tr> <tr> <td>SQL Server</td> <td>1</td> <td>8</td> <td>8</td> <td>Cumulative</td> </tr> <tr> <td>Windows</td> <td>1</td> <td>416</td> <td>35</td> <td>Cumulative</td> </tr> </tbody> </table> <h3 id="notable-cves">Notable CVEs</h3> <table> <thead> <tr> <th>CVE ID</th> <th>Title</th> <th>Notable Item</th> </tr> </thead> <tbody> <tr> <td>CVE-2026-50661</td> <td>Windows BitLocker Security Feature Bypass Vulnerability</td> <td>Publicly Known</td> </tr> <tr> <td>CVE-2026-56155</td> <td>Active Directory Federation Services Elevation of Privilege Vulnerability</td> <td>Exploitation Detected</td> </tr> <tr> <td>CVE-2026-56164</td> <td>Microsoft SharePoint Server Elevation of Privilege Vulnerability</td> <td>Exploitation Detected</td> </tr> <tr> <td>CVE-2026-58644</td> <td>Microsoft SharePoint Remote Code Execution Vulnerability</td> <td>Exploitation Detected</td> </tr> </tbody> </table> <h3 id="we-are-republishing-428-non-microsoft-chromium-cves">We are republishing 428 non-Microsoft Chromium CVEs</h3> <h2 id="security-update-guide-blog-posts">Security Update Guide Blog Posts</h2> <table> <thead> <tr> <th>Date</th> <th>Blog Post</th> </tr> </thead> <tbody> <tr> <td>October 31, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/introducing-new-features-improved-security-experience">You asked, we delivered: Introducing new features for an improved security experience</a></td> </tr> <tr> <td>October 28, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/understanding-cve-2025-55315">Understanding CVE-2025-55315: What CISOs, security engineers, and sysadmins should know</a></td> </tr> <tr> <td>October 22, 2025</td> <td><a href="https://www.microsoft.com/en-us/msrc/blog/2025/10/toward-greater-transparency-machine-readable-vulnerability-exploitability-xchange-for-azure-linux">Toward greater transparency: Introducing machine-readable Vulnerability Exploitability Xchange (VEX) for Azure Linux and beyond</a></td> </tr> <tr> <td>November 12, 2024</td> <td><a href="https://aka.ms/MSRC-CSAF-Blog">Toward greater transparency: Publishing machine-readable CSAF files</a></td> </tr> <tr> <td>June 27, 2024</td> <td><a href="https://msrc.microsoft.com/blog/2024/06/toward-greater-transparency-unveiling-cloud-service-cves/">Toward greater transparency: Unveiling Cloud Service CVEs</a></td> </tr> <tr> <td>April 9, 2024</td> <td><a href="https://aka.ms/MSRC-CWE-Blog">Toward greater transparency: Security Update Guide now shares CWEs for CVEs</a></td> </tr> <tr> <td>January 6, 2023</td> <td><a href="https://msrc.microsoft.com/blog/2023/01/publishing-cbl-mariner-cves-on-the-security-update-guide-cvrf-api/">Publishing CBL-Mariner CVEs on the Security Update Guide CVRF API</a></td> </tr> <tr> <td>January 11, 2022</td> <td><a href="https://aka.ms/SUGNotificationProfile">Coming Soon: New Security Update Guide Notification System</a></td> </tr> <tr> <td>February 9, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/02/09/continuing-to-listen-good-news-about-the-security-update-guide-api/">Continuing to Listen: Good News about the Security Update Guide API</a></td> </tr> <tr> <td>January 13, 2021</td> <td><a href="https://msrc-blog.microsoft.com/2021/01/13/security-update-guide-supports-cves-assigned-by-industry-partners/">Security Update Guide Supports CVEs Assigned by Industry Partners</a></td> </tr> <tr> <td>December 8, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/12/08/security-update-guide-lets-keep-the-conversation-going/">Security Update Guide: Let’s keep the conversation going</a></td> </tr> <tr> <td>November 9, 2020</td> <td><a href="https://msrc-blog.microsoft.com/2020/11/09/vulnerability-descriptions-in-the-new-version-of-the-security-update-guide/">Vulnerability Descriptions in the New Version of the Security Update Guide</a></td> </tr> </tbody> </table> <h2 id="relevant-resources">Relevant Resources</h2> <ul> <li>The new Hotpatching feature is now generally available. Please see <a href="https://docs.microsoft.com/en-us/azure/automanage/automanage-hotpatch?WT.mc_id=modinfra-18529-thmaure">Hotpatching feature for Windows Server Azure Edition virtual machines (VMs)</a> for more information.</li> <li>Windows 10 and Windows 11 updates are cumulative. The monthly security release includes all security fixes for vulnerabilities that affect Windows 10 and Windows 11, in addition to non-security updates. The updates are available via the <a href="https://www.catalog.update.microsoft.com/Home.aspx">Microsoft Update Catalog</a>. For information on lifecycle and support dates for Windows 10 and Windows 11 operating systems, please see <a href="https://docs.microsoft.com/en-us/lifecycle/faq/windows">Windows Lifecycle Facts Sheet</a>.</li> <li>Microsoft is improving Windows Release Notes. For more information, please see <a href="https://techcommunity.microsoft.com/t5/windows-it-pro-blog/what-s-next-for-windows-release-notes/ba-p/1754399">What's next for Windows release notes</a>.</li> <li>A list of the latest servicing stack updates for each operating system can be found in <a href="https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV990001">ADV990001</a>. This list will be updated whenever a new servicing stack update is released. It is important to install the latest servicing stack update.</li> <li>In addition to security changes for the vulnerabilities, updates include defense-in-depth updates to help improve security-related features.</li> <li>Customers running Windows Server 2008 R2, or Windows Server 2008 need to purchase the Extended Security Update to continue receiving security updates. See <a href="https://support.microsoft.com/en-us/topic/procedure-to-continue-receiving-security-updates-after-extended-support-ends-on-january-14-2020-48c59204-fe67-3f42-84fc-c3c3145ff28e">4522133</a> for more information.</li> </ul> <h2 id="known-issues">Known Issues</h2> <p>You can see these in more detail from the Deployments tab by selecting <strong>Known Issues</strong> column in the <strong>Edit Columns</strong> panel.</p> <p>For more information about Windows Known Issues, please see <a href="https://docs.microsoft.com/en-us/windows/release-information/windows-message-center">Windows message center</a> (links to currently-supported versions of Windows are in the left pane).</p> <table> <thead> <tr> <th>KB Article</th> <th>Applies To</th> </tr> </thead> <tbody> <tr> <td><a href="https://support.microsoft.com/help/5002882">5002882</a></td> <td>SharePoint Server Subscription Edition</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5099444">5099444</a></td> <td>Windows Server 2012 R2</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5099445">5099445</a></td> <td>Windows Server 2012</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5099536">5099536</a></td> <td>Windows Server 2025</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5099540">5099540</a></td> <td>Windows Server 2022</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5101346">5101346</a></td> <td>SQL Server 2025 CU6</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5101347">5101347</a></td> <td>SQL Server 2022 CU25</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102333">5102333</a></td> <td>SQL Server 2025 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102334">5102334</a></td> <td>SQL Server 2022 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102336">5102336</a></td> <td>SQL Server 2019 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102337">5102337</a></td> <td>SQL Server 2017 CU31</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102338">5102338</a></td> <td>SQL Server 2017 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102339">5102339</a></td> <td>SQL Server 2017 GDR</td> </tr> <tr> <td><a href="https://support.microsoft.com/help/5102340">5102340</a></td> <td>SQL Server 2016 SP3 GDR</td> </tr> </tbody> </table> The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply. Microsoft 365 Copilot for Android Microsoft 365 Copilot for iOS Microsoft 365 Copilot Windows Terminal App Microsoft Bing Search for iOS Microsoft PC Manager Windows Terminal for Windows 10 Windows Terminal for Windows 11 Microsoft Edge (Chromium-based) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Windows Server 2025 (Server Core installation) Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems Windows Server 2025 Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 Windows Server 2016 (Server Core installation) Windows Server 2022 (Server Core installation) Windows Admin Center Windows Remote Help Microsoft Configuration Manager 2509 Microsoft Configuration Manager 2603 Remote Desktop Web Client Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft SQL Server 2022 for x64-based Systems (CU 25) Microsoft SQL Server 2025 for x64-based Systems (CU6) Microsoft SQL Server 2017 for x64-based Systems (GDR) Microsoft SQL Server 2019 for x64-based Systems (GDR) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack Microsoft SQL Server 2017 for x64-based Systems (CU 31) Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft SQL Server 2025 for x64-based Systems (GDR) Microsoft SQL Server 2019 for x64-based Systems (CU 32) Power BI Report Server Fabric Data Warehouse Azure Synapse Azure Open AI Microsoft Entra Provisioning Service Azure Spring Apps Azure CycleCloud 8.9.1 Azure Active Directory Azure Monitor Agent Metrics Extension Microsoft Exchange Online Microsoft Exchange Server Subscription Edition RTM .NET 10.0 installed on Linux .NET 10.0 installed on Mac OS .NET 8.0 installed on Windows .NET 8.0 installed on Mac OS .NET 8.0 installed on Linux .NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 9.0 installed on Windows Microsoft Visual Studio 2022 version 17.12 Microsoft Visual Studio 2022 version 17.14 Microsoft Visual Studio 2026 version 18.7 .NET 10.0 installed on Windows Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) Microsoft.AspNetCore.OData Microsoft.AspNet.OData Visual Studio Code Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft Visual Studio 2026 version 18.5 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems Age of Empires II: Definitive Edition Game GitHub Copilot Plugin for JetBrains IDEs Minecraft Bedrock Dedicated Server Microsoft Copilot Microsoft Malware Protection Engine Microsoft Configuration Manager 2503 Microsoft Defender for Endpoint for Mac Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Office Online Server Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions Microsoft Office LTSC for Mac 2024 Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft Office 365 for Mac Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Microsoft Office for Android Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft PowerPoint 2016 (32-bit edition) Microsoft PowerPoint 2016 (64-bit edition) Surface Windows Dev Kit Microsoft Surface Hub Microsoft Surface Laptop Go 2 Surface Laptop 4 with AMD Processor Microsoft Surface Hub 2S Microsoft Surface Go 2 Surface Laptop 4 with Intel Processor Microsoft Surface Pro 8 Microsoft Surface Laptop Go 3 Microsoft Surface Laptop Go Microsoft Surface Go 3 Microsoft Surface Pro 7+ Microsoft Surface Hub 3 Microsoft Dynamics NAV 2018 Windows Subsystem for Linux (WSL2) azl3 kernel 6.6.139.1-1 on Azure Linux 3.0 azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0 azl3 dhcpcd 10.0.8-2 on Azure Linux 3.0 azl3 dhcpcd 10.0.8-4 on Azure Linux 3.0 azl3 curl 8.11.1-9 on Azure Linux 3.0 azl3 mysql 8.0.46-1 on Azure Linux 3.0 azl3 rust 1.75.0-30 on Azure Linux 3.0 azl3 rust 1.90.0-9 on Azure Linux 3.0 azl3 cmake 3.30.3-14 on Azure Linux 3.0 azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 azl3 kernel 6.6.143.1-1 on Azure Linux 3.0 azl3 openssl 3.3.7-3 on Azure Linux 3.0 azl3 php 8.3.31-1 on Azure Linux 3.0 azl3 erlang 26.2.5.21-2 on Azure Linux 3.0 azl3 keras 3.3.3-7 on Azure Linux 3.0 azl3 pytorch 2.2.2-15 on Azure Linux 3.0 azl3 openssh 9.8p1-8 on Azure Linux 3.0 azl3 libXfont2 2.0.6-1 on Azure Linux 3.0 azl3 wayland 1.22.0-1 on Azure Linux 3.0 azl3 xorg-x11-server-Xwayland 24.1.12-1 on Azure Linux 3.0 azl3 ntopng 5.2.1-6 on Azure Linux 3.0 azl3 ruby 3.3.5-8 on Azure Linux 3.0 azl3 rubygem-webrick 1.8.1-3 on Azure Linux 3.0 azl3 telegraf 1.31.0-23 on Azure Linux 3.0 azl3 kpatch 0.9.8-3 on Azure Linux 3.0 azl3 vim 9.2.0735-1 on Azure Linux 3.0 azl3 clamav 1.5.2-3 on Azure Linux 3.0 azl3 perl-DBI 1.643-5 on Azure Linux 3.0 azl3 python-mistune 3.3.0-1 on Azure Linux 3.0 azl3 python-pip 24.2-9 on Azure Linux 3.0 azl3 python-virtualenv 20.36.1-5 on Azure Linux 3.0 azl3 python3 3.12.9-13 on Azure Linux 3.0 azl3 gawk 5.2.2-1 on Azure Linux 3.0 azl3 perl 5.38.2-512 on Azure Linux 3.0 azl3 golang 1.25.11-3 on Azure Linux 3.0 azl3 golang 1.26.4-3 on Azure Linux 3.0 azl3 libarchive 3.7.7-6 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0 azl3 libsolv 0.7.28-4 on Azure Linux 3.0 azl3 libsoup 3.4.4-16 on Azure Linux 3.0 azl3 python-pyasn1 0.4.8-2 on Azure Linux 3.0 azl3 coredns 1.11.4-17 on Azure Linux 3.0 azl3 squid 6.13-4 on Azure Linux 3.0 azl3 busybox 1.36.1-24 on Azure Linux 3.0 azl3 nginx 1.28.3-6 on Azure Linux 3.0 azl3 qemu 9.1.0-10 on Azure Linux 3.0 azl3 kernel 6.6.144.1-1 on Azure Linux 3.0 azl3 hdf5 1.14.6-2 on Azure Linux 3.0 azl3 runc 1.3.3-2 on Azure Linux 3.0 azl3 etcd 3.5.30-2 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 tar 1.35-2 on Azure Linux 3.0 azl3 gh 2.62.0-18 on Azure Linux 3.0 azl3 rubygem-excon 0.102.0-1 on Azure Linux 3.0 azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0 azl3 rust-afterburn 5.8.2-2 on Azure Linux 3.0 azl3 python-cryptography 42.0.5-4 on Azure Linux 3.0 azl3 libreswan 4.15-1 on Azure Linux 3.0 azl3 patch 2.7.6-9 on Azure Linux 3.0 azl3 python-setuptools 69.0.3-5 on Azure Linux 3.0 azl3 mtr 0.95-3 on Azure Linux 3.0 azl3 syslog-ng 4.3.1-3 on Azure Linux 3.0 Microsoft Exchange Online Windows Server 2012 Windows Server 2012 (Server Core installation) Windows Server 2012 R2 Windows Server 2012 R2 (Server Core installation) Microsoft Excel 2016 (32-bit edition) Microsoft Excel 2016 (64-bit edition) Microsoft PowerPoint 2016 (32-bit edition) Microsoft PowerPoint 2016 (64-bit edition) Microsoft Word 2016 (32-bit edition) Microsoft Word 2016 (64-bit edition) Microsoft Office 2016 (32-bit edition) Microsoft Office 2016 (64-bit edition) Windows Server 2016 Office Online Server Windows 10 Version 1607 for 32-bit Systems Windows 10 Version 1607 for x64-based Systems Windows Server 2016 (Server Core installation) Microsoft SharePoint Enterprise Server 2016 Microsoft SQL Server 2017 for x64-based Systems (GDR) Windows 10 Version 1809 for 32-bit Systems Windows 10 Version 1809 for x64-based Systems Windows Server 2019 Windows Server 2019 (Server Core installation) Microsoft Office 2019 for 32-bit editions Microsoft Office 2019 for 64-bit editions Microsoft SharePoint Server 2019 Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8) Visual Studio Code Windows Admin Center Microsoft .NET Framework 4.8 on Windows Server 2012 Microsoft .NET Framework 4.8 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2012 R2 Microsoft .NET Framework 4.8 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 4.8 on Windows Server 2016 Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 4.8 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 4.8 on Windows Server 2016 (Server Core installation) Microsoft Edge (Chromium-based) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2019 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1607 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2016 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows 10 Version 1809 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 Microsoft .NET Framework 3.5 AND 4.7.2 on Windows Server 2019 (Server Core installation) Power BI Report Server Microsoft Surface Hub Microsoft Dynamics NAV 2018 Microsoft 365 Apps for Enterprise for 32-bit Systems Microsoft 365 Apps for Enterprise for 64-bit Systems Microsoft SQL Server 2019 for x64-based Systems (GDR) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 on Windows Server 2012 R2 (Server Core installation) Microsoft Malware Protection Engine Windows Server 2022 Windows Server 2022 (Server Core installation) Windows 10 Version 21H2 for 32-bit Systems Windows 10 Version 21H2 for ARM64-based Systems Windows 10 Version 21H2 for x64-based Systems Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10) Microsoft Office LTSC for Mac 2021 Microsoft Office LTSC 2021 for 64-bit editions Microsoft Office LTSC 2021 for 32-bit editions Microsoft SharePoint Server Subscription Edition Azure Active Directory Microsoft Defender for Endpoint for Mac Microsoft Exchange Server 2016 Cumulative Update 23 Azure Synapse Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 (GDR) Microsoft SQL Server 2016 for x64-based Systems Service Pack 3 Azure Connect Feature Pack Windows Subsystem for Linux (WSL2) Microsoft .NET Framework 4.8.1 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2022 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 21H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 10 Version 22H2 for 32-bit Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 23H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 24H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 Microsoft .NET Framework 3.5 AND 4.8.1 on Windows Server 2025 (Server Core installation) Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for ARM64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 25H2 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 3.5 AND 4.8.1 on Windows 11 Version 26H1 for ARM64-based Systems Windows 10 Version 22H2 for x64-based Systems Windows 10 Version 22H2 for ARM64-based Systems Windows 10 Version 22H2 for 32-bit Systems Windows Terminal for Windows 10 Windows Terminal for Windows 11 Microsoft SQL Server 2017 for x64-based Systems (CU 31) Microsoft SQL Server 2022 for x64-based Systems (GDR) Microsoft Office for Android Windows 11 Version 23H2 for ARM64-based Systems Windows 11 Version 23H2 for x64-based Systems Azure Open AI Microsoft Exchange Server 2019 Cumulative Update 14 Microsoft Bing Search for iOS Windows 11 Version 24H2 for ARM64-based Systems Windows 11 Version 24H2 for x64-based Systems .NET 8.0 installed on Windows .NET 8.0 installed on Linux .NET 8.0 installed on Mac OS Microsoft Office LTSC 2024 for 32-bit editions Microsoft Office LTSC 2024 for 64-bit editions .NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 9.0 installed on Windows Windows Server 2025 Windows Server 2025 (Server Core installation) Microsoft Office LTSC for Mac 2024 Microsoft PC Manager Microsoft Visual Studio 2022 version 17.12 Microsoft Surface Go 2 Microsoft Surface Pro 7+ Microsoft Surface Pro 8 Surface Windows Dev Kit Surface Laptop 4 with Intel Processor Microsoft Surface Laptop Go Microsoft Surface Laptop Go 3 Microsoft Surface Hub 2S Microsoft Surface Hub 3 Microsoft Surface Laptop Go 2 Microsoft Surface Go 3 Surface Laptop 4 with AMD Processor Microsoft Exchange Server 2019 Cumulative Update 15 Microsoft 365 Copilot Microsoft Visual Studio 2022 version 17.14 Microsoft SQL Server 2019 for x64-based Systems (CU 32) Microsoft Configuration Manager 2503 Microsoft Exchange Server Subscription Edition RTM azl3 patch 2.7.6-9 on Azure Linux 3.0 azl3 syslog-ng 4.3.1-3 on Azure Linux 3.0 azl3 libreswan 4.15-1 on Azure Linux 3.0 azl3 python-setuptools 69.0.3-5 on Azure Linux 3.0 azl3 mtr 0.95-3 on Azure Linux 3.0 azl3 python-tensorboard 2.16.2-6 on Azure Linux 3.0 azl3 tar 1.35-2 on Azure Linux 3.0 azl3 rubygem-elasticsearch 8.9.0-1 on Azure Linux 3.0 Windows 11 Version 25H2 for ARM64-based Systems Windows 11 Version 25H2 for x64-based Systems Azure Spring Apps GitHub Copilot Plugin for JetBrains IDEs Microsoft SQL Server 2025 for x64-based Systems (GDR) azl3 wayland 1.22.0-1 on Azure Linux 3.0 azl3 ntopng 5.2.1-6 on Azure Linux 3.0 .NET 10.0 installed on Windows .NET 10.0 installed on Mac OS .NET 10.0 installed on Linux Windows 11 version 26H1 for x64-based Systems Windows 11 Version 26H1 for ARM64-based Systems azl3 tensorflow 2.16.1-11 on Azure Linux 3.0 Microsoft 365 Copilot for iOS Microsoft 365 Copilot for Android Microsoft Copilot azl3 hdf5 1.14.6-2 on Azure Linux 3.0 azl3 python-pyasn1 0.4.8-2 on Azure Linux 3.0 azl3 python-cryptography 42.0.5-4 on Azure Linux 3.0 Microsoft Visual Studio 2026 version 18.5 azl3 keras 3.3.3-7 on Azure Linux 3.0 azl3 mysql 8.0.46-1 on Azure Linux 3.0 Azure Monitor Agent Metrics Extension azl3 ruby 3.3.5-8 on Azure Linux 3.0 azl3 kernel 6.6.139.1-1 on Azure Linux 3.0 Microsoft.AspNetCore.OData Microsoft.AspNet.OData Microsoft Office 365 for Mac Microsoft SQL Server 2022 for x64-based Systems (CU 25) azl3 busybox 1.36.1-24 on Azure Linux 3.0 azl3 rust-afterburn 5.8.2-2 on Azure Linux 3.0 azl3 pytorch 2.2.2-15 on Azure Linux 3.0 azl3 etcd 3.5.30-2 on Azure Linux 3.0 Age of Empires II: Definitive Edition Game Minecraft Bedrock Dedicated Server azl3 kernel 6.6.143.1-1 on Azure Linux 3.0 azl3 libsolv 0.7.28-4 on Azure Linux 3.0 azl3 libsoup 3.4.4-16 on Azure Linux 3.0 azl3 python-pip 24.2-9 on Azure Linux 3.0 azl3 telegraf 1.31.0-23 on Azure Linux 3.0 azl3 golang 1.25.11-3 on Azure Linux 3.0 azl3 rabbitmq-server 3.13.7-6 on Azure Linux 3.0 azl3 golang 1.26.4-3 on Azure Linux 3.0 azl3 cmake 3.30.3-14 on Azure Linux 3.0 azl3 python3 3.12.9-13 on Azure Linux 3.0 azl3 openssh 9.8p1-8 on Azure Linux 3.0 azl3 rust 1.75.0-30 on Azure Linux 3.0 azl3 perl 5.38.2-512 on Azure Linux 3.0 azl3 rust 1.90.0-9 on Azure Linux 3.0 azl3 dhcpcd 10.0.8-2 on Azure Linux 3.0 azl3 nginx 1.28.3-6 on Azure Linux 3.0 Microsoft Entra Provisioning Service azl3 runc 1.3.3-2 on Azure Linux 3.0 azl3 libarchive 3.7.7-6 on Azure Linux 3.0 Azure CycleCloud 8.9.1 Windows Remote Help azl3 curl 8.11.1-9 on Azure Linux 3.0 azl3 openssl 3.3.7-3 on Azure Linux 3.0 azl3 php 8.3.31-1 on Azure Linux 3.0 azl3 qemu 9.1.0-10 on Azure Linux 3.0 azl3 gh 2.62.0-18 on Azure Linux 3.0 azl3 dhcpcd 10.0.8-4 on Azure Linux 3.0 Microsoft SQL Server 2025 for x64-based Systems (CU6) azl3 erlang 26.2.5.21-2 on Azure Linux 3.0 Microsoft Configuration Manager 2509 Microsoft Configuration Manager 2603 azl3 libXfont2 2.0.6-1 on Azure Linux 3.0 azl3 clamav 1.5.2-3 on Azure Linux 3.0 azl3 rubygem-webrick 1.8.1-3 on Azure Linux 3.0 azl3 kpatch 0.9.8-3 on Azure Linux 3.0 Fabric Data Warehouse azl3 vim 9.2.0735-1 on Azure Linux 3.0 azl3 perl-DBI 1.643-5 on Azure Linux 3.0 azl3 python-mistune 3.3.0-1 on Azure Linux 3.0 azl3 python-virtualenv 20.36.1-5 on Azure Linux 3.0 azl3 xorg-x11-server-Xwayland 24.1.12-1 on Azure Linux 3.0 azl3 kernel 6.6.144.1-1 on Azure Linux 3.0 Microsoft Visual Studio 2026 version 18.7 azl3 gawk 5.2.2-1 on Azure Linux 3.0 Windows Terminal App Remote Desktop Web Client azl3 coredns 1.11.4-17 on Azure Linux 3.0 azl3 squid 6.13-4 on Azure Linux 3.0 azl3 rubygem-excon 0.102.0-1 on Azure Linux 3.0 azl3 rpm-ostree 2024.4-11 on Azure Linux 3.0 Microsoft .NET Framework 3.5 on Windows Server 2012 Microsoft .NET Framework 3.5 on Windows Server 2012 (Server Core installation) Microsoft .NET Framework 3.5 on Windows Server 2012 R2 Microsoft .NET Framework 3.5 on Windows Server 2012 R2 (Server Core installation) Microsoft .NET Framework 3.5 on Windows 11 version 26H1 for x64-based Systems Microsoft .NET Framework 3.5 on Windows 11 Version 26H1 for ARM64-based Systems net: rds: clear i_sends on setup unwind Mariner Linux Yes CVE-2026-53355 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 2.0 2026-07-02T14:43:58 <p>Information published.</p> 1.0 2026-07-02T01:03:30 <p>Information published.</p> 3.0 2026-07-09T14:49:56 <p>Information published.</p> drm/virtio: Fix driver removal with disabled KMS Mariner Linux Yes CVE-2026-53347 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-02T01:04:20 <p>Information published.</p> 2.0 2026-07-02T14:44:42 <p>Information published.</p> 3.0 2026-07-09T14:50:12 <p>Information published.</p> ARM: 9475/1: entry: use byte load for KASAN VMAP stack shadow Mariner Linux Yes CVE-2026-53343 21344-17084 21344-17084 Important 21344-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-02T01:04:59 <p>Information published.</p> 2.0 2026-07-02T14:45:20 <p>Information published.</p> 3.0 2026-07-09T14:51:00 <p>Information published.</p> drm/amd/display: Use krealloc_array() in dal_vector_reserve() Mariner Linux Yes CVE-2026-53329 21344-17084 21344-17084 Important 21344-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 2.0 2026-07-02T14:45:02 <p>Information published.</p> 3.0 2026-07-09T14:50:35 <p>Information published.</p> 1.0 2026-07-02T01:04:39 <p>Information published.</p> signal: clear JOBCTL_PENDING_MASK for caller in zap_other_threads() Mariner Linux Yes CVE-2026-53352 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-02T01:04:33 <p>Information published.</p> 2.0 2026-07-02T14:44:55 <p>Information published.</p> 3.0 2026-07-09T14:50:28 <p>Information published.</p> netfilter: nf_conntrack: destroy stale expectfn expectations on unregister Mariner Linux Yes CVE-2026-53349 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-02T01:04:46 <p>Information published.</p> 2.0 2026-07-02T14:45:08 <p>Information published.</p> 3.0 2026-07-09T14:50:45 <p>Information published.</p> Allocation of Resources Without Limits or Throttling in Elasticsearch Leading to Denial of Service Mariner elastic Yes CVE-2026-56149 Allocation of Resources Without Limits or Throttling 20188-17084 20188-17084 Moderate 20188-17084 4.9 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 20188-17084 1.0 2026-07-03T01:02:04 <p>Information published.</p> Dhcpcd: dhcpcd infinite loop and out-of-bounds read via zero-length ipv6 nd option in router advertisement handling Mariner redhat Yes CVE-2026-14258 Loop with Unreachable Exit Condition ('Infinite Loop') 21524-17084 21558-17084 21524-17084 21558-17084 Moderate 21524-17084 Moderate 21558-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21524-17084 6.5 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21558-17084 CBL-Mariner Releases 21524-17084 21558-17084 No Security Update 10.0.8-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21524-17084 21558-17084 CBL-Mariner Releases 2.0 2026-07-05T14:43:33 <p>Information published.</p> 3.0 2026-07-06T14:45:18 <p>Information published.</p> 1.0 2026-07-03T01:03:50 <p>Information published.</p> IKEv1 Denial of Service via RSA-SHA1 (PKCS#1 Version 1.5 Encrypted) authentication payload Mariner libreswan Yes CVE-2026-50721 Improper Verification of Cryptographic Signature 17755-17084 17755-17084 Important 17755-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 17755-17084 CBL-Mariner Releases 17755-17084 No Security Update 4.15-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17755-17084 CBL-Mariner Releases 1.0 2026-07-04T01:03:02 <p>Information published.</p> 2.0 2026-07-09T14:39:28 <p>Information published.</p> IKEv2 Denial of Service via RSA-SHA1 (PKCS#1 RSASSA-PKCS1-v1_5) authentication payload Mariner libreswan Yes CVE-2026-50722 Improper Verification of Cryptographic Signature 17755-17084 17755-17084 Important 17755-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 17755-17084 CBL-Mariner Releases 17755-17084 No Security Update 4.15-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17755-17084 CBL-Mariner Releases 1.0 2026-07-04T01:03:08 <p>Information published.</p> 2.0 2026-07-09T14:39:37 <p>Information published.</p> exposing HTTP/3 early data Mariner curl Yes CVE-2026-9545 21549-17084 21270-17084 21500-17084 21514-17084 21549-17084 21270-17084 21500-17084 21514-17084 Important 21549-17084 Low 21270-17084 Important 21500-17084 Low 21514-17084 7.5 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P 21549-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 2.0 2026-07-07T01:41:09 <p>Information published.</p> 3.0 2026-07-09T01:46:22 <p>Information published.</p> 1.0 2026-07-04T01:04:22 <p>Information published.</p> IKEv2 Denial of Service via malformed fragmentation Mariner libreswan Yes CVE-2026-12413 Off-by-one Error 17755-17084 17755-17084 Important 17755-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 17755-17084 CBL-Mariner Releases 17755-17084 No Security Update 4.15-2 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 17755-17084 CBL-Mariner Releases 1.0 2026-07-04T01:03:15 <p>Information published.</p> 2.0 2026-07-09T14:39:45 <p>Information published.</p> incomplete mTLS config matching in conn reuse Mariner curl Yes CVE-2026-8932 21491-17084 21270-17084 21549-17084 21500-17084 21514-17084 21021-17084 21491-17084 21270-17084 21549-17084 21500-17084 21514-17084 21021-17084 Important 21491-17084 Low 21270-17084 Important 21549-17084 Low 21500-17084 Low 21514-17084 Low 21021-17084 7.5 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P 21491-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 7.5 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:P 21549-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 1.0 2026-07-04T01:04:54 <p>Information published.</p> 2.0 2026-07-07T01:41:30 <p>Information published.</p> 3.0 2026-07-09T01:46:48 <p>Information published.</p> 4.0 2026-07-12T14:47:57 <p>Information published.</p> SSH improper host validation Mariner curl Yes CVE-2026-9547 21491-17084 21500-17084 21549-17084 21270-17084 21514-17084 21021-17084 21491-17084 21500-17084 21549-17084 21270-17084 21514-17084 21021-17084 Critical 21491-17084 Critical 21500-17084 Critical 21549-17084 Critical 21270-17084 Critical 21514-17084 Important 21021-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21491-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21500-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21549-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21270-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21514-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21021-17084 2.0 2026-07-06T14:46:35 <p>Information published.</p> 3.0 2026-07-09T01:47:17 <p>Information published.</p> 1.0 2026-07-04T01:05:15 <p>Information published.</p> wrong reuse for different services Mariner curl Yes CVE-2026-8458 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 Moderate 21549-17084 Moderate 21491-17084 Low 21270-17084 Low 21500-17084 Low 21514-17084 Low 21021-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21549-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N 21491-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 1.0 2026-07-04T01:06:19 <p>Information published.</p> 2.0 2026-07-07T01:42:14 <p>Information published.</p> 3.0 2026-07-07T14:41:25 <p>Information published.</p> 4.0 2026-07-09T01:48:27 <p>Information published.</p> 5.0 2026-07-12T14:48:23 <p>Information published.</p> trailing dot domain super cookie Mariner curl Yes CVE-2026-8924 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 Important 21549-17084 Important 21491-17084 Low 21270-17084 Low 21500-17084 Low 21514-17084 Low 21021-17084 9.1 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P 21549-17084 9.1 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P 21491-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 2.0 2026-07-07T01:41:55 <p>Information published.</p> 3.0 2026-07-09T01:48:07 <p>Information published.</p> 1.0 2026-07-04T01:05:58 <p>Information published.</p> HTTP/2 stream-dependency tree UAF Mariner curl Yes CVE-2026-10536 21500-17084 21549-17084 21491-17084 21270-17084 21514-17084 21021-17084 21500-17084 21549-17084 21491-17084 21270-17084 21514-17084 21021-17084 Low 21500-17084 Moderate 21549-17084 Moderate 21491-17084 Low 21270-17084 Low 21514-17084 Low 21021-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 4.7 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P 21549-17084 5.5 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:P 21491-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 3.0 2026-07-09T01:48:59 <p>Information published.</p> 3.1 2026-07-10T14:40:19 <p>Information published.</p> 4.0 2026-07-12T14:49:23 <p>Information published.</p> 1.0 2026-07-04T01:07:25 <p>Information published.</p> 2.0 2026-07-07T01:42:55 <p>Information published.</p> 3.2 2026-07-11T14:38:42 <p>Information published.</p> cross-origin Digest auth state leak Mariner curl Yes CVE-2026-11856 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 Moderate 21549-17084 Moderate 21491-17084 Moderate 21270-17084 Moderate 21500-17084 Moderate 21514-17084 Moderate 21021-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21549-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21491-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 2.0 2026-07-06T14:46:55 <p>Information published.</p> 3.0 2026-07-09T01:47:43 <p>Information published.</p> 1.0 2026-07-04T01:05:36 <p>Information published.</p> wrong STARTTLS connection reuse Mariner curl Yes CVE-2026-8286 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21021-17084 Important 21549-17084 Important 21491-17084 Low 21270-17084 Low 21500-17084 Low 21514-17084 Low 21021-17084 8.1 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P 21549-17084 8.1 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P 21491-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 4.0 2026-07-12T14:49:04 <p>Information published.</p> 1.0 2026-07-04T01:06:52 <p>Information published.</p> 2.0 2026-07-07T01:42:34 <p>Information published.</p> 3.0 2026-07-09T01:50:03 <p>Information published.</p> password leak with netrc and user in URL Mariner curl Yes CVE-2026-8926 21549-17084 21270-17084 21500-17084 21514-17084 21549-17084 21270-17084 21500-17084 21514-17084 Moderate 21549-17084 Low 21270-17084 Critical 21500-17084 Low 21514-17084 5.9 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P 21549-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 2.0 2026-07-07T01:43:09 <p>Information published.</p> 1.0 2026-07-04T01:07:40 <p>Information published.</p> 3.0 2026-07-09T01:49:37 <p>Information published.</p> 3.1 2026-07-10T14:40:29 <p>Information published.</p> 4.0 2026-07-12T14:49:44 <p>Information published.</p> UAF after pause in socket callback Mariner curl Yes CVE-2026-9080 21270-17084 21500-17084 21514-17084 21270-17084 21500-17084 21514-17084 Low 21270-17084 Low 21500-17084 Low 21514-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 1.0 2026-07-04T01:07:52 <p>Information published.</p> 2.0 2026-07-07T01:43:20 <p>Information published.</p> 3.0 2026-07-09T01:49:11 <p>Information published.</p> SASL double-free Mariner curl Yes CVE-2026-8925 21270-17084 21500-17084 21514-17084 21270-17084 21500-17084 21514-17084 Moderate 21270-17084 Moderate 21500-17084 Moderate 21514-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21270-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21500-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21514-17084 2.0 2026-07-06T14:47:19 <p>Information published.</p> 1.0 2026-07-04T01:08:05 <p>Information published.</p> 3.0 2026-07-09T01:49:49 <p>Information published.</p> ipv6: account for fraggap on the paged allocation path Mariner Linux Yes CVE-2026-53362 21474-17084 21474-17084 Important 21474-17084 7.3 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.144.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-07-06T14:47:38 <p>Information published.</p> 1.0 2026-07-05T01:03:10 <p>Information published.</p> 3.0 2026-07-08T14:47:02 <p>Information published.</p> KVM: x86: Fix shadow paging use-after-free due to unexpected role Mariner Linux Yes CVE-2026-53359 21474-17084 21474-17084 Important 21474-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.144.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 1.0 2026-07-05T01:03:16 <p>Information published.</p> 2.0 2026-07-07T14:41:35 <p>Information published.</p> 3.0 2026-07-08T14:47:09 <p>Information published.</p> 4.0 2026-07-09T01:50:15 <p>Information published.</p> ext/openssl: Memory corruption in openssl_encrypt with AES-WRAP-PAD Mariner php Yes CVE-2026-14355 Heap-based Buffer Overflow 21550-17084 21551-17084 21550-17084 21551-17084 Moderate 21550-17084 Moderate 21551-17084 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 21550-17084 5.6 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 21551-17084 2.0 2026-07-06T14:47:27 <p>Information published.</p> 1.0 2026-07-05T01:02:57 <p>Information published.</p> 3.0 2026-07-09T01:50:09 <p>Information published.</p> af_unix: Set gc_in_progress to true in unix_gc(). Mariner Linux Yes CVE-2026-53361 21474-17084 21474-17084 Moderate 21474-17084 4.5 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.144.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-07-06T14:47:33 <p>Information published.</p> 1.0 2026-07-05T01:03:04 <p>Information published.</p> 3.0 2026-07-08T14:46:54 <p>Information published.</p> TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension Mariner EEF Yes CVE-2026-55952 Improper Validation of Specified Quantity in Input 21564-17084 21564-17084 Important 21564-17084 1.0 2026-07-07T01:01:15 <p>Information published.</p> 2.0 2026-07-09T01:50:21 <p>Information published.</p> SSH SFTP server denial of service via extended channel data infinite loop Mariner EEF Yes CVE-2026-54886 Loop with Unreachable Exit Condition ('Infinite Loop') 21564-17084 21564-17084 Moderate 21564-17084 CBL-Mariner Releases 21564-17084 No Security Update 26.2.5.21-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21564-17084 CBL-Mariner Releases 2.0 2026-07-11T01:40:30 <p>Information published.</p> 1.0 2026-07-07T01:01:22 <p>Information published.</p> Arbitrary HDF5 File Read via Virtual Dataset Bypass in keras-team/keras Mariner @huntr_ai Yes CVE-2026-12480 External Control of File Name or Path 21265-17084 21265-17084 Moderate 21265-17084 5.5 5.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:P 21265-17084 CBL-Mariner Releases 21265-17084 No Security Update 3.3.3-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21265-17084 CBL-Mariner Releases 2.0 2026-07-14T01:38:59 <p>Information published.</p> 1.0 2026-07-07T01:01:38 <p>Information published.</p> onnx onnxruntime old.cc convPoolShapeInference_opset19 out-of-bounds Mariner VulDB Yes CVE-2026-14647 Out-of-bounds Read 21404-17084 21404-17084 Low 21404-17084 4.3 3.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C 21404-17084 1.0 2026-07-07T01:01:44 <p>Information published.</p> internal-sftp in sshd in OpenSSH before 10.4 recognizes only the first 9 command-line arguments, which can be important if a later command-line argument would have helped to ensure the intended security properties of an SFTP connection. Mariner mitre Yes CVE-2026-59997 Improper Validation of Specified Quantity in Input 21499-17084 21499-17084 Moderate 21499-17084 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 1.0 2026-07-09T01:01:15 <p>Information published.</p> 2.0 2026-07-12T14:50:41 <p>Information published.</p> scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations. Mariner mitre Yes CVE-2026-59996 Relative Path Traversal 21499-17084 21499-17084 Moderate 21499-17084 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 2.0 2026-07-12T14:50:58 <p>Information published.</p> 1.0 2026-07-09T01:01:22 <p>Information published.</p> sftp in OpenSSH before 10.4 does not properly constrain the location of downloaded files when "sftp server:/path ." is used with an attacker-controlled server. Mariner mitre Yes CVE-2026-59995 Relative Path Traversal 21499-17084 21499-17084 Moderate 21499-17084 4.2 4.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 1.0 2026-07-09T01:01:28 <p>Information published.</p> 2.0 2026-07-12T14:51:17 <p>Information published.</p> sshd in OpenSSH before 10.4 does not always honor the minimum authentication delay. Mariner mitre Yes CVE-2026-60001 Allocation of Resources Without Limits or Throttling 21499-17084 21499-17084 Moderate 21499-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 1.0 2026-07-09T01:01:35 <p>Information published.</p> 2.0 2026-07-12T14:51:37 <p>Information published.</p> sshd in OpenSSH before 10.4 allows remote attackers to cause a denial of service (resource consumption from excessive authentication attempts) because MaxAuthTries was mishandled for GSSAPIAuthentication. Mariner mitre Yes CVE-2026-60000 Allocation of Resources Without Limits or Throttling 21499-17084 21499-17084 Low 21499-17084 3.7 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 1.0 2026-07-09T01:01:41 <p>Information published.</p> 2.0 2026-07-12T14:51:55 <p>Information published.</p> In sshd in OpenSSH before 10.4, DisableForwarding=yes was supposed to take precedence over PermitTunnel=yes, but did not. Mariner mitre Yes CVE-2026-59999 Use of Less Trusted Source 21499-17084 21499-17084 Moderate 21499-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 1.0 2026-07-09T01:01:47 <p>Information published.</p> 2.0 2026-07-12T14:52:14 <p>Information published.</p> ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.) Mariner mitre Yes CVE-2026-60002 Use After Free 21499-17084 21499-17084 Important 21499-17084 7.7 7.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L 21499-17084 CBL-Mariner Releases 21499-17084 No Security Update 9.8p1-9 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21499-17084 CBL-Mariner Releases 1.0 2026-07-09T01:01:53 <p>Information published.</p> 2.0 2026-07-12T14:52:35 <p>Information published.</p> libXfont2 PCF Font Parsing Heap Buffer Overflow Mariner suse Yes CVE-2026-56002 Heap-based Buffer Overflow 21567-17084 21567-17084 Important 21567-17084 8.5 7.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21567-17084 CBL-Mariner Releases 21567-17084 No Security Update 2.0.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21567-17084 CBL-Mariner Releases 1.0 2026-07-09T01:02:13 <p>Information published.</p> 2.0 2026-07-12T14:53:31 <p>Information published.</p> xorg-x11-server / xwayland GLX contextTags Use-After-Free in CommonMakeCurrent() Mariner suse Yes CVE-2026-56000 Use After Free 20749-17084 21578-17084 20749-17084 21578-17084 Critical 20749-17084 Moderate 21578-17084 CBL-Mariner Releases 21578-17084 No Security Update 24.1.13-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21578-17084 CBL-Mariner Releases 1.0 2026-07-09T01:02:26 <p>Information published.</p> 2.0 2026-07-11T01:08:33 <p>Information published.</p> 3.0 2026-07-12T14:54:03 <p>Information published.</p> ntopng through 6.6 is vulnerable to Predictable Session Identifier which can lead to Session Hijacking. HTTP session identifiers in src/HTTPserver.cpp use weak time-seeded pseudo-randomness during session creation. As a result, fresh authenticated logins can receive deterministic or colliding session cookies under attacker-controlled timing. Mariner mitre Yes CVE-2026-38968 Predictable from Observable State 20791-17084 20791-17084 Critical 20791-17084 9.8 9.0 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U 20791-17084 1.0 2026-07-09T01:02:45 <p>Information published.</p> ruby webrick through v1.9.2 WEBrick reparses trailer Content-Length into canonical request state, enabling request smuggling. Mariner mitre Yes CVE-2026-38969 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') 21312-17084 21569-17084 21312-17084 21569-17084 Moderate 21312-17084 Moderate 21569-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U 21312-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:U 21569-17084 1.0 2026-07-09T01:02:55 <p>Information published.</p> Pion DTLS: Denial of service via panic while parsing a crafted ECDHE_PSK ServerKeyExchange message Mariner GitHub_M Yes CVE-2026-54908 Out-of-bounds Read 21481-17084 21481-17084 Moderate 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-25 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 2.0 2026-07-11T01:41:05 <p>Information published.</p> 1.0 2026-07-09T01:03:02 <p>Information published.</p> NULL Pointer Dereference in GNU patch Mariner CERT-PL Yes CVE-2026-56288 NULL Pointer Dereference 21570-17084 16927-17084 21570-17084 16927-17084 Moderate 21570-17084 Moderate 16927-17084 CBL-Mariner Releases 16927-17084 No Security Update 2.7.6-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16927-17084 CBL-Mariner Releases 1.0 2026-07-10T01:01:37 <p>Information published.</p> 2.0 2026-07-15T01:40:21 <p>Information published.</p> Vim: Arbitrary Code Execution via PHP Omni-Completion Mariner GitHub_M Yes CVE-2026-59856 Improper Control of Generation of Code ('Code Injection') 21574-17084 21574-17084 Important 21574-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H 21574-17084 CBL-Mariner Releases 21574-17084 No Security Update 9.2.0782-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21574-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:16 <p>Information published.</p> 2.0 2026-07-12T14:55:22 <p>Information published.</p> ClamAV FSG File Format Processing Out-of-Bounds Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20214 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:29 <p>Information published.</p> 2.0 2026-07-12T14:56:03 <p>Information published.</p> ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20215 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:35 <p>Information published.</p> 2.0 2026-07-12T14:56:22 <p>Information published.</p> ClamAV InstallShield File Format Processing Resource Exhaustion Vulnerability Mariner cisco Yes CVE-2026-20216 Allocation of Resources Without Limits or Throttling 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:41 <p>Information published.</p> 2.0 2026-07-12T14:56:40 <p>Information published.</p> ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20217 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:47 <p>Information published.</p> 2.0 2026-07-12T14:56:58 <p>Information published.</p> ClamAV DMG File Processing Denial of Service Vulnerability Mariner cisco Yes CVE-2026-20244 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 2.0 2026-07-12T14:57:41 <p>Information published.</p> 1.0 2026-07-11T01:02:00 <p>Information published.</p> sshd in OpenSSH before 10.4 has an undocumented security-relevant behavior: GSSAPIStrictAcceptorCheck has no value if the server is in Windows Active Directory. Mariner mitre Yes CVE-2026-59998 Improper Following of Specification by Caller 21499-17084 21499-17084 Moderate 21499-17084 4.8 4.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 21499-17084 1.0 2026-07-11T01:02:59 <p>Information published.</p> DBI versions before 1.650 for Perl are vulnerable to code injection via caller-influenced Profile Mariner CPANSec Yes CVE-2026-14380 Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') 21575-17084 21575-17084 Important 21575-17084 8.8 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.650-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 1.0 2026-07-11T01:06:39 <p>Information published.</p> 2.0 2026-07-12T14:58:35 <p>Information published.</p> DBI versions before 1.650 for Perl read one byte out-of-bounds in preparse when deleting an initial SQL comment Mariner CPANSec Yes CVE-2026-14740 Out-of-bounds Read 21575-17084 21575-17084 Important 21575-17084 9.1 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.650-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 1.0 2026-07-11T01:06:45 <p>Information published.</p> 2.0 2026-07-12T14:58:52 <p>Information published.</p> Mistune: XSS via unescaped class option in Admonition directive Mariner GitHub_M Yes CVE-2026-59926 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21576-17084 21576-17084 Moderate 21576-17084 6.1 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N 21576-17084 1.0 2026-07-11T01:06:59 <p>Information published.</p> inline_parser: quadratic-time parsing on long runs of `**x**` and `***x***` emphasis pairs Mariner GitHub_M Yes CVE-2026-59925 Inefficient Algorithmic Complexity 21576-17084 21576-17084 Important 21576-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21576-17084 1.0 2026-07-11T01:07:05 <p>Information published.</p> Mistune toc / TableOfContents directive: heading IDs use predictable `toc_N` numbering with no slugification, allowing collision with attacker-controlled `id="toc_N"` content Mariner GitHub_M Yes CVE-2026-59930 Insufficient Verification of Data Authenticity 21576-17084 21576-17084 Moderate 21576-17084 4.3 4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 21576-17084 1.0 2026-07-11T01:07:18 <p>Information published.</p> setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) on macOS APFS/HFS+ Mariner GitHub_M Yes CVE-2026-59890 Improper Handling of Unicode Encoding 21480-17084 21577-17084 21492-17084 19458-17084 21021-17084 21480-17084 21577-17084 21492-17084 19458-17084 21021-17084 Moderate 21480-17084 Moderate 21577-17084 Moderate 21492-17084 Moderate 19458-17084 Moderate 21021-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U 21480-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U 21577-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N 21492-17084 6.1 5.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U 19458-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N 21021-17084 CBL-Mariner Releases 19458-17084 No Security Update 69.0.3-6 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19458-17084 CBL-Mariner Releases 2.0 2026-07-13T14:40:57 <p>Information published.</p> 1.0 2026-07-11T01:07:37 <p>Information published.</p> NATS Server: Remote crash via integer overflow in Connz pagination Mariner GitHub_M Yes CVE-2026-58207 Integer Overflow or Wraparound 21481-17084 21481-17084 Important 21481-17084 7.7 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 1.0 2026-07-11T01:07:49 <p>Information published.</p> 2.0 2026-07-15T01:40:45 <p>Information published.</p> NATS Server: Queue Subscribe Authz Bypass Mariner GitHub_M Yes CVE-2026-58251 Improper Authorization 21481-17084 21481-17084 Moderate 21481-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 1.0 2026-07-11T01:07:55 <p>Information published.</p> 2.0 2026-07-15T01:40:53 <p>Information published.</p> NATS Server: MQTT-over-WebSocket Path Can Crash WebSocket-Only JetStream Servers Before MQTT Is Enabled Mariner GitHub_M Yes CVE-2026-58208 Uncaught Exception 21481-17084 21481-17084 Moderate 21481-17084 6.8 6.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 1.0 2026-07-11T01:08:02 <p>Information published.</p> 2.0 2026-07-15T01:41:00 <p>Information published.</p> NATS Server: Subscribe Authz Bypass via Wildcard-Overlap Mariner GitHub_M Yes CVE-2026-58252 Improper Authorization 21481-17084 21481-17084 Moderate 21481-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 2.0 2026-07-15T01:41:15 <p>Information published.</p> 1.0 2026-07-11T01:08:14 <p>Information published.</p> NATS Server: MQTT retained and QoS replay bypass subscribe deny filters Mariner GitHub_M Yes CVE-2026-58209 Incorrect Authorization 21481-17084 21481-17084 Moderate 21481-17084 4.3 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 1.0 2026-07-11T01:08:20 <p>Information published.</p> 2.0 2026-07-15T01:41:23 <p>Information published.</p> NATS Server: Route API Auth Bypass Mariner GitHub_M Yes CVE-2026-58253 Improper Authentication 21481-17084 21481-17084 Important 21481-17084 8.8 8.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 2.0 2026-07-15T01:41:30 <p>Information published.</p> 1.0 2026-07-11T01:08:26 <p>Information published.</p> Heap buffer overflow in gawk Mariner CERT-PL Yes CVE-2026-40468 Integer Overflow or Wraparound 21582-17084 21582-17084 Low 21582-17084 1.0 2026-07-14T01:01:35 <p>Information published.</p> Perl versions through 5.43.10 have an integer overflow in S_measure_struct leading to an out-of-bounds heap read in pack and unpack Mariner CPANSec Yes CVE-2026-57432 Integer Overflow or Wraparound 21504-17084 21504-17084 Important 21504-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21504-17084 CBL-Mariner Releases 21504-17084 No Security Update 5.38.2-513 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21504-17084 CBL-Mariner Releases 1.0 2026-07-15T01:01:20 <p>Information published.</p> Root escape via symlink plus trailing slash in os Mariner Go Yes CVE-2026-39822 UNIX Symbolic Link (Symlink) Following 21483-17084 21489-17084 21483-17084 21489-17084 Important 21483-17084 Important 21489-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21483-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21489-17084 1.0 2026-07-15T01:01:36 <p>Information published.</p> Invoking Encrypted Client Hello privacy leak in crypto/tls Mariner Go Yes CVE-2026-42505 Insertion of Sensitive Information Into Sent Data 21483-17084 21489-17084 21483-17084 21489-17084 Moderate 21483-17084 Moderate 21489-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21483-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21489-17084 1.0 2026-07-15T01:01:45 <p>Information published.</p> Libarchive: heap overflow oob read while parsing a tar archive contains a pax extended header Mariner redhat Yes CVE-2026-15028 Heap-based Buffer Overflow 21491-17084 21544-17084 21491-17084 21544-17084 Low 21491-17084 Low 21544-17084 3.9 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L 21491-17084 3.9 3.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L 21544-17084 CBL-Mariner Releases 21544-17084 No Security Update 3.7.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21544-17084 CBL-Mariner Releases 3.0 2026-07-22T01:39:39 <p>Information published.</p> 1.0 2026-07-15T01:02:01 <p>Information published.</p> 2.0 2026-07-15T14:39:54 <p>Information published.</p> RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations Mariner GitHub_M Yes CVE-2026-57219 Exposure of Sensitive Information to an Unauthorized Actor 21487-17084 21487-17084 Important 21487-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 1.0 2026-07-15T01:02:14 <p>Information published.</p> 2.0 2026-07-22T01:39:47 <p>Information published.</p> Libsolv: stack-based buffer overflow in libsolv eddsa pgp signature verification allows denial of service Mariner redhat Yes CVE-2026-48863 Stack-based Buffer Overflow 21477-17084 21477-17084 Important 21477-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21477-17084 CBL-Mariner Releases 21477-17084 No Security Update 0.7.28-5 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21477-17084 CBL-Mariner Releases 1.0 2026-07-17T01:01:19 <p>Information published.</p> 2.0 2026-07-21T01:40:55 <p>Information published.</p> ipv4: account for fraggap on the paged allocation path Mariner Linux Yes CVE-2026-53366 21474-17084 21474-17084 Important 21474-17084 8.5 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H 21474-17084 2.0 2026-07-17T14:39:28 <p>Information published.</p> 1.0 2026-07-17T01:01:26 <p>Information published.</p> Libsoup: soupcache: libsoup: http/2 frame window exhaustion remote denial of service via memory leak Mariner redhat Yes CVE-2026-15713 Missing Release of Resource after Effective Lifetime 21478-17084 21478-17084 Moderate 21478-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N 21478-17084 1.0 2026-07-17T01:01:38 <p>Information published.</p> Libsoup: soupmultipartinputstream: libsoup: out-of-bounds read in soup_multipart_input_stream_read_headers via an oversized multipart boundary string Mariner redhat Yes CVE-2026-15714 Out-of-bounds Read 21478-17084 21478-17084 Moderate 21478-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L 21478-17084 1.0 2026-07-17T01:01:45 <p>Information published.</p> Soupclientmessageiohttp2: libsoup3: libsoup: http/2 goaway frame parsing heap buffer over-read via invalid nul-termination assumption Mariner redhat Yes CVE-2026-15712 Out-of-bounds Read 21478-17084 21478-17084 Moderate 21478-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H 21478-17084 1.0 2026-07-17T01:01:51 <p>Information published.</p> DBI versions before 1.651 for Perl do not enforce statement handle consistency with the row Mariner CPANSec Yes CVE-2026-60082 Out-of-bounds Read 21575-17084 21575-17084 Critical 21575-17084 9.1 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.651-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 2.0 2026-07-21T01:41:17 <p>Information published.</p> 1.0 2026-07-17T01:02:16 <p>Information published.</p> DBI::ProfileData versions before 1.651 for Perl do not limit the path index Mariner CPANSec Yes CVE-2026-60081 Allocation of Resources Without Limits or Throttling 21575-17084 21575-17084 Important 21575-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.651-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 1.0 2026-07-17T01:02:29 <p>Information published.</p> 2.0 2026-07-21T01:41:32 <p>Information published.</p> pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs Mariner GitHub_M Yes CVE-2026-59884 Uncontrolled Resource Consumption 21138-17084 21138-17084 Important 21138-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21138-17084 CBL-Mariner Releases 21138-17084 No Security Update 0.4.8-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21138-17084 CBL-Mariner Releases 1.0 2026-07-17T01:02:41 <p>Information published.</p> 2.0 2026-07-22T01:41:21 <p>Information published.</p> pyasn1: Uncontrolled resource consumption when converting decoded REAL values Mariner GitHub_M Yes CVE-2026-59886 Uncontrolled Resource Consumption 21138-17084 21138-17084 Important 21138-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21138-17084 CBL-Mariner Releases 21138-17084 No Security Update 0.4.8-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21138-17084 CBL-Mariner Releases 1.0 2026-07-17T01:02:48 <p>Information published.</p> 2.0 2026-07-22T01:41:29 <p>Information published.</p> CoreDNS: proxyproto plugin panics on PPv2 datagram with non-UDP transport — single 28-byte packet remote DoS Mariner GitHub_M Yes CVE-2026-62309 NULL Pointer Dereference 21585-17084 21585-17084 Important 21585-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21585-17084 1.0 2026-07-18T01:01:20 <p>Information published.</p> CoreDNS: rewrite-plugin EDNS0 response-revert nil-pointer panic (remote DoS) when a downstream plugin returns a response with no OPT record Mariner GitHub_M Yes CVE-2026-62299 NULL Pointer Dereference 21585-17084 21585-17084 Moderate 21585-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 21585-17084 CBL-Mariner Releases 21585-17084 No Security Update 1.11.4-18 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21585-17084 CBL-Mariner Releases 1.0 2026-07-18T01:01:26 <p>Information published.</p> 2.0 2026-07-21T01:41:42 <p>Information published.</p> Squid: Memory disclosure in FTP gateway Mariner GitHub_M Yes CVE-2026-47729 Out-of-bounds Read 21586-17084 21586-17084 Moderate 21586-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21586-17084 1.0 2026-07-18T01:01:34 <p>Information published.</p> A heap overflow in the ifsbreakup() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Mariner mitre Yes CVE-2026-38754 Heap-based Buffer Overflow 21396-17084 21396-17084 Important 21396-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21396-17084 CBL-Mariner Releases 21396-17084 No Security Update 1.36.1-25 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21396-17084 CBL-Mariner Releases 2.0 2026-07-20T14:40:14 <p>Information published.</p> 1.0 2026-07-19T01:01:56 <p>Information published.</p> 3.0 2026-07-21T01:41:54 <p>Information published.</p> NGINX Map directive and Regex matching vulnerability Mariner f5 Yes CVE-2026-42533 Heap-based Buffer Overflow 21527-17084 21527-17084 Critical 21527-17084 8.1 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21527-17084 CBL-Mariner Releases 21527-17084 No Security Update 1.28.3-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21527-17084 CBL-Mariner Releases 1.0 2026-07-19T01:02:14 <p>Information published.</p> 2.0 2026-07-20T14:40:31 <p>Information published.</p> 3.0 2026-07-22T01:41:48 <p>Information published.</p> NGINX ngx_http_ssi_module vulnerability Mariner f5 Yes CVE-2026-56434 Use After Free 21527-17084 21527-17084 Important 21527-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H 21527-17084 CBL-Mariner Releases 21527-17084 No Security Update 1.28.3-8 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21527-17084 CBL-Mariner Releases 1.0 2026-07-19T01:02:20 <p>Information published.</p> 2.0 2026-07-20T14:40:38 <p>Information published.</p> 3.0 2026-07-22T01:41:55 <p>Information published.</p> Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write Mariner fedora Yes CVE-2026-3842 Out-of-bounds Write 21552-17084 21552-17084 Important 21552-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21552-17084 CBL-Mariner Releases 21552-17084 No Security Update 9.1.0-11 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21552-17084 CBL-Mariner Releases 2.0 2026-07-20T14:40:44 <p>Information published.</p> 3.0 2026-07-21T01:42:10 <p>Information published.</p> 1.0 2026-07-19T01:02:32 <p>Information published.</p> f2fs: bound i_inline_xattr_size for non-inline-xattr inodes Mariner Linux Yes CVE-2026-63815 21580-17084 21580-17084 Moderate 21580-17084 5.0 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 21580-17084 2.0 2026-07-20T14:40:50 <p>Information published.</p> 1.0 2026-07-20T01:01:23 <p>Information published.</p> iio: adc: ti-ads1298: add bounds check to pga_settings index Mariner Linux Yes CVE-2026-53386 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:01:49 <p>Information published.</p> 2.0 2026-07-20T14:41:12 <p>Information published.</p> block: Avoid mounting the bdev pseudo-filesystem in userspace Mariner Linux Yes CVE-2026-63810 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-20T01:02:14 <p>Information published.</p> 2.0 2026-07-20T14:41:35 <p>Information published.</p> NFSv4/flexfiles: reject zero filehandle version count Mariner Linux Yes CVE-2026-53392 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-20T01:02:33 <p>Information published.</p> 2.0 2026-07-20T14:41:52 <p>Information published.</p> drm/amdgpu: zero-initialize GART table on allocation Mariner Linux Yes CVE-2026-53374 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:02:39 <p>Information published.</p> 2.0 2026-07-20T14:41:57 <p>Information published.</p> drm/amdkfd: Add upper bound check for num_of_nodes Mariner Linux Yes CVE-2026-53376 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:02:57 <p>Information published.</p> 2.0 2026-07-20T14:42:15 <p>Information published.</p> KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Mariner Linux Yes CVE-2026-63806 21580-17084 21580-17084 Important 21580-17084 7.3 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H 21580-17084 1.0 2026-07-20T01:03:04 <p>Information published.</p> 2.0 2026-07-20T14:42:21 <p>Information published.</p> ntfs3: reject direct userspace writes to reserved $LX* xattrs Mariner Linux Yes CVE-2026-63833 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:03:29 <p>Information published.</p> 2.0 2026-07-20T14:42:43 <p>Information published.</p> fbdev: fix use-after-free in store_modes() Mariner Linux Yes CVE-2026-63826 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-20T01:03:53 <p>Information published.</p> 2.0 2026-07-20T14:43:06 <p>Information published.</p> net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Mariner Linux Yes CVE-2026-63829 21580-17084 21580-17084 Important 21580-17084 8.2 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H 21580-17084 2.0 2026-07-20T14:43:23 <p>Information published.</p> 1.0 2026-07-20T01:04:12 <p>Information published.</p> drm/amdgpu/vce: Prevent partial address patches Mariner Linux Yes CVE-2026-53375 21580-17084 21580-17084 Important 21580-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21580-17084 2.0 2026-07-20T14:43:29 <p>Information published.</p> 1.0 2026-07-20T01:04:18 <p>Information published.</p> nfsd: reset write verifier on deferred writeback errors Mariner Linux Yes CVE-2026-53393 21580-17084 21580-17084 Moderate 21580-17084 5.9 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L 21580-17084 1.0 2026-07-20T01:04:37 <p>Information published.</p> 2.0 2026-07-20T14:43:45 <p>Information published.</p> bpf: use kvfree() for replaced sysctl write buffer Mariner Linux Yes CVE-2026-63809 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:04:44 <p>Information published.</p> 2.0 2026-07-20T14:43:51 <p>Information published.</p> hdlc_ppp: sync per-proto timers before freeing hdlc state Mariner Linux Yes CVE-2026-63803 21474-17084 21474-17084 Important 21474-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:44:08 <p>Information published.</p> 1.0 2026-07-20T01:05:02 <p>Information published.</p> batman-adv: tp_meter: restrict number of unacked list entries Mariner Linux Yes CVE-2026-63834 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:05:09 <p>Information published.</p> 2.0 2026-07-20T14:44:14 <p>Information published.</p> NFSv4/pNFS: reject zero-length r_addr in nfs4_decode_mp_ds_addr Mariner Linux Yes CVE-2026-53391 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:05:28 <p>Information published.</p> 2.0 2026-07-20T14:44:31 <p>Information published.</p> wifi: ath11k: fix warning when unbinding Mariner Linux Yes CVE-2026-63822 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:05:34 <p>Information published.</p> 2.0 2026-07-20T14:44:36 <p>Information published.</p> nfsd: fix posix_acl leak on SETACL decode failure Mariner Linux Yes CVE-2026-53397 21474-17084 21474-17084 Moderate 21474-17084 6.7 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:05:52 <p>Information published.</p> 2.0 2026-07-20T14:44:54 <p>Information published.</p> batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd Mariner Linux Yes CVE-2026-63836 21474-17084 21474-17084 Important 21474-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:05:58 <p>Information published.</p> 2.0 2026-07-20T14:44:59 <p>Information published.</p> ocfs2: reject oversized group bitmap descriptors Mariner Linux Yes CVE-2026-63796 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21474-17084 1.0 2026-07-20T01:06:42 <p>Information published.</p> 1.1 2026-07-20T14:45:39 <p>Information published.</p> 2.0 2026-07-21T01:44:23 <p>Information published.</p> f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() Mariner Linux Yes CVE-2026-63812 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:07:14 <p>Information published.</p> 2.0 2026-07-20T14:46:07 <p>Information published.</p> tipc: fix slab-use-after-free Read in tipc_aead_decrypt_done Mariner Linux Yes CVE-2026-63801 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21474-17084 1.0 2026-07-20T01:07:32 <p>Information published.</p> 1.1 2026-07-20T14:46:24 <p>Information published.</p> 2.0 2026-07-21T01:39:19 <p>Information published.</p> apparmor: mediate the implicit connect of TCP fast open sendmsg Mariner Linux Yes CVE-2026-63828 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:07:39 <p>Information published.</p> 1.1 2026-07-20T14:46:30 <p>Information published.</p> 2.0 2026-07-21T01:39:26 <p>Information published.</p> media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si Mariner Linux Yes CVE-2026-53382 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 2.0 2026-07-20T14:46:47 <p>Information published.</p> 1.0 2026-07-20T01:07:57 <p>Information published.</p> 9p: avoid putting oldfid in p9_client_walk() error path Mariner Linux Yes CVE-2026-63795 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:08:03 <p>Information published.</p> 2.0 2026-07-20T14:46:53 <p>Information published.</p> virtiofs: fix UAF on submount umount Mariner Linux Yes CVE-2026-53381 21474-17084 21474-17084 Important 21474-17084 8.1 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21474-17084 1.0 2026-07-20T01:08:22 <p>Information published.</p> 2.0 2026-07-20T14:47:10 <p>Information published.</p> exfat: fix potential use-after-free in exfat_find_dir_entry() Mariner Linux Yes CVE-2026-63808 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21474-17084 2.0 2026-07-20T14:47:15 <p>Information published.</p> 1.0 2026-07-20T01:08:28 <p>Information published.</p> ALSA: asihpi: Fix potential OOB array access at reading cache Mariner Linux Yes CVE-2026-64133 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:01:42 <p>Information published.</p> drm/amd/display: Validate GPIO pin LUT table size before iterating Mariner Linux Yes CVE-2026-64097 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:02:50 <p>Information published.</p> KVM: SEV: Ignore Port I/O requests of length '0' Mariner Linux Yes CVE-2026-63940 21580-17084 21580-17084 Important 21580-17084 7.7 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H 21580-17084 1.0 2026-07-21T01:03:02 <p>Information published.</p> netfilter: ebtables: move to two-stage removal scheme Mariner Linux Yes CVE-2026-64077 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:03:09 <p>Information published.</p> drm/amdgpu: fix amdgpu_hmm_range_get_pages Mariner Linux Yes CVE-2026-63879 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:03:54 <p>Information published.</p> drm/amdkfd: fix NULL pointer bug in svm_range_set_attr Mariner Linux Yes CVE-2026-63882 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:12 <p>Information published.</p> blk-mq: pop cached request if it is usable Mariner Linux Yes CVE-2026-64017 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:46 <p>Information published.</p> erofs: fix metabuf leak in inode xattr initialization Mariner Linux Yes CVE-2026-64146 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:05:10 <p>Information published.</p> Array full size, element count, and element size are not checked to make sure they match in H5Odtype.c Mariner GitHub_M Yes CVE-2026-26197 Out-of-bounds Read 21121-17084 21121-17084 Moderate 21121-17084 1.0 2026-07-22T01:01:19 <p>Information published.</p> bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Mariner Linux Yes CVE-2026-64192 21580-17084 21580-17084 Important 21580-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-22T01:01:38 <p>Information published.</p> netfilter: ipset: fix race between dump and ip_set_list resize Mariner Linux Yes CVE-2026-64189 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-22T01:02:03 <p>Information published.</p> net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() Mariner Linux Yes CVE-2026-64188 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-22T01:02:10 <p>Information published.</p> arm64: errata: Mitigate TLBI errata on various Arm CPUs Mariner Linux Yes CVE-2026-53354 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21474-17084 1.0 2026-07-02T01:03:11 <p>Information published.</p> 2.0 2026-07-02T14:43:39 <p>Information published.</p> 3.0 2026-07-09T01:44:00 <p>Information published.</p> runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations Mariner GitHub_M Yes CVE-2026-41579 UNIX Symbolic Link (Symlink) Following 21537-17084 21537-17084 Low 21537-17084 3.3 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N 21537-17084 CBL-Mariner Releases 21537-17084 No Security Update 1.3.6-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21537-17084 CBL-Mariner Releases 1.0 2026-07-02T01:03:03 <p>Information published.</p> 2.0 2026-07-05T14:42:07 <p>Information published.</p> KVM: Don't WARN if memory is dirtied without a vCPU when the VM is dying Mariner Linux Yes CVE-2026-53345 21474-17084 21474-17084 Moderate 21474-17084 6.5 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H 21474-17084 1.0 2026-07-02T01:03:18 <p>Information published.</p> 2.0 2026-07-02T14:43:46 <p>Information published.</p> 3.0 2026-07-09T01:44:09 <p>Information published.</p> slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd Mariner Linux Yes CVE-2026-53332 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 2.0 2026-07-02T14:44:05 <p>Information published.</p> 1.0 2026-07-02T01:03:36 <p>Information published.</p> 3.0 2026-07-09T01:44:16 <p>Information published.</p> nvmem: layouts: onie-tlv: fix hang on unknown types Mariner Linux Yes CVE-2026-53336 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 1.0 2026-07-02T01:03:55 <p>Information published.</p> 2.0 2026-07-02T14:44:24 <p>Information published.</p> 3.0 2026-07-09T01:44:34 <p>Information published.</p> debugobjects: Do not fill_pool() if pi_blocked_on Mariner Linux Yes CVE-2026-53327 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 CBL-Mariner Releases 21474-17084 No Security Update 6.6.144.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21474-17084 CBL-Mariner Releases 2.0 2026-07-02T14:44:11 <p>Information published.</p> 1.0 2026-07-02T01:03:43 <p>Information published.</p> 3.0 2026-07-08T14:44:19 <p>Information published.</p> 4.0 2026-07-09T01:44:25 <p>Information published.</p> net: bonding: fix NULL pointer dereference in bond_do_ioctl() Mariner Linux Yes CVE-2026-53337 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 2.0 2026-07-02T14:44:17 <p>Information published.</p> 1.0 2026-07-02T01:03:49 <p>Information published.</p> 3.0 2026-07-09T14:50:04 <p>Information published.</p> drm/i915/gem: Fix phys BO pread/pwrite with offset Mariner Linux Yes CVE-2026-53356 21344-17084 21344-17084 Important 21344-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-02T01:04:52 <p>Information published.</p> 2.0 2026-07-02T14:45:14 <p>Information published.</p> 3.0 2026-07-09T14:50:52 <p>Information published.</p> hsr: Remove WARN_ONCE() in hsr_addr_is_self(). Mariner Linux Yes CVE-2026-53353 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-02T01:04:26 <p>Information published.</p> 2.0 2026-07-02T14:44:49 <p>Information published.</p> 3.0 2026-07-09T14:50:20 <p>Information published.</p> i2c: qcom-cci: Fix NULL pointer dereference in cci_remove() Mariner Linux Yes CVE-2026-53339 21344-17084 21344-17084 Moderate 21344-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21344-17084 1.0 2026-07-02T01:05:05 <p>Information published.</p> 2.0 2026-07-02T14:45:26 <p>Information published.</p> 3.0 2026-07-09T01:45:03 <p>Information published.</p> Uncontrolled Resource Consumption in Elasticsearch Leading to Denial of Service Mariner elastic Yes CVE-2026-49090 Uncontrolled Resource Consumption 20188-17084 20188-17084 Moderate 20188-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 20188-17084 1.0 2026-07-03T01:01:57 <p>Information published.</p> Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() Mariner Linux Yes CVE-2026-53357 21344-17084 21344-17084 Moderate 21344-17084 5.9 5.9 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:H 21344-17084 CBL-Mariner Releases 21344-17084 No Security Update 6.6.143.1-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21344-17084 CBL-Mariner Releases 1.0 2026-07-03T01:02:18 <p>Information published.</p> 2.0 2026-07-09T14:38:55 <p>Information published.</p> stale proxy password leak Mariner curl Yes CVE-2026-9079 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 21549-17084 21491-17084 21270-17084 21500-17084 21514-17084 Important 21549-17084 Important 21491-17084 Important 21270-17084 Important 21500-17084 Important 21514-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 2.0 2026-07-06T14:46:14 <p>Information published.</p> 4.0 2026-07-12T14:47:37 <p>Information published.</p> 1.0 2026-07-04T01:04:07 <p>Information published.</p> 3.0 2026-07-09T01:46:04 <p>Information published.</p> env-set cross-proxy Digest auth state leak Mariner curl Yes CVE-2026-8927 21491-17084 21549-17084 21270-17084 21500-17084 21514-17084 21021-17084 21491-17084 21549-17084 21270-17084 21500-17084 21514-17084 21021-17084 Moderate 21491-17084 Moderate 21549-17084 Moderate 21270-17084 Moderate 21500-17084 Moderate 21514-17084 Moderate 21021-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21491-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21549-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21270-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21500-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21514-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N 21021-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 2.0 2026-07-06T14:45:49 <p>Information published.</p> 3.0 2026-07-09T01:49:26 <p>Information published.</p> 1.0 2026-07-04T01:03:49 <p>Information published.</p> 4.0 2026-07-12T14:47:16 <p>Information published.</p> proto-default skips SSH verification Mariner curl Yes CVE-2026-12064 21549-17084 21500-17084 21514-17084 21549-17084 21500-17084 21514-17084 Important 21549-17084 Important 21500-17084 Important 21514-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21549-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N 21500-17084 7.4 7.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N 21514-17084 CBL-Mariner Releases 21549-17084 No Security Update 8.11.1-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21549-17084 CBL-Mariner Releases 2.0 2026-07-06T14:47:07 <p>Information published.</p> 3.0 2026-07-09T01:48:39 <p>Information published.</p> 4.0 2026-07-12T14:48:43 <p>Information published.</p> 1.0 2026-07-04T01:06:31 <p>Information published.</p> Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl Mariner EEF Yes CVE-2026-54891 Improper Enforcement of Message Integrity During Transmission in a Communication Channel 21564-17084 21564-17084 Moderate 21564-17084 1.0 2026-07-07T01:01:28 <p>Information published.</p> 2.0 2026-07-09T01:50:30 <p>Information published.</p> libXfont2 BitmapScaleBitmaps Integer Overflow Heap Buffer Overflow Mariner suse Yes CVE-2026-56001 Heap-based Buffer Overflow 21567-17084 21567-17084 Important 21567-17084 8.5 7.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21567-17084 CBL-Mariner Releases 21567-17084 No Security Update 2.0.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21567-17084 CBL-Mariner Releases 1.0 2026-07-09T01:02:00 <p>Information published.</p> 2.0 2026-07-12T14:52:55 <p>Information published.</p> libXfont2 computeProps Property Buffer Heap Buffer Overflow Mariner suse Yes CVE-2026-56003 Heap-based Buffer Overflow 21567-17084 21567-17084 Important 21567-17084 8.5 7.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U 21567-17084 CBL-Mariner Releases 21567-17084 No Security Update 2.0.8-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21567-17084 CBL-Mariner Releases 1.0 2026-07-09T01:02:07 <p>Information published.</p> 2.0 2026-07-12T14:53:12 <p>Information published.</p> xorg-server / xwayland glamor font atlas Heap Buffer Overflow Mariner suse Yes CVE-2026-55999 Heap-based Buffer Overflow 20749-17084 20749-17084 Important 20749-17084 8.5 8.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H 20749-17084 1.0 2026-07-09T01:02:20 <p>Information published.</p> WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader Mariner securin Yes CVE-2026-14191 Out-of-bounds Write 21568-17084 21568-17084 Important 21568-17084 7.8 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U 21568-17084 1.0 2026-07-09T01:02:39 <p>Information published.</p> etcd: gRPC client listener does not enforce `--client-crl-file` certificate revocation Mariner GitHub_M Yes CVE-2026-59818 Improper Certificate Validation 21428-17084 21428-17084 Moderate 21428-17084 6.5 6.0 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U 21428-17084 CBL-Mariner Releases 21428-17084 No Security Update 3.5.32-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21428-17084 CBL-Mariner Releases 2.0 2026-07-16T14:39:02 <p>Information published.</p> 1.0 2026-07-10T01:01:17 <p>Information published.</p> Loop with Unreachable Exit Condition in GNU patch Mariner CERT-PL Yes CVE-2026-56289 Loop with Unreachable Exit Condition ('Infinite Loop') 21570-17084 16927-17084 21570-17084 16927-17084 Moderate 21570-17084 Moderate 16927-17084 CBL-Mariner Releases 16927-17084 No Security Update 2.7.6-10 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 16927-17084 CBL-Mariner Releases 1.0 2026-07-10T01:01:27 <p>Information published.</p> 2.0 2026-07-15T01:40:12 <p>Information published.</p> ClamAV PE File Format Processing Out-of-Bounds Memory Corruption Vulnerability Mariner cisco Yes CVE-2026-20213 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:22 <p>Information published.</p> 2.0 2026-07-12T14:55:43 <p>Information published.</p> ClamAV ALZ Archive Processing Denial of Service Vulnerability Mariner cisco Yes CVE-2026-20243 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') 21568-17084 21568-17084 Important 21568-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21568-17084 CBL-Mariner Releases 21568-17084 No Security Update 1.5.3-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21568-17084 CBL-Mariner Releases 1.0 2026-07-11T01:01:53 <p>Information published.</p> 2.0 2026-07-12T14:57:23 <p>Information published.</p> Out-of-bound read in mtr Mariner CERT-PL Yes CVE-2026-14461 Out-of-bounds Read 19619-17084 19619-17084 Moderate 19619-17084 CBL-Mariner Releases 19619-17084 No Security Update 0.95-4 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 19619-17084 CBL-Mariner Releases 1.0 2026-07-11T01:04:28 <p>Information published.</p> 2.0 2026-07-14T01:39:17 <p>Information published.</p> DBI versions before 1.650 for Perl have a heap overflow when preparsing SQL statements with an extreme number of placeholders Mariner CPANSec Yes CVE-2026-14739 Out-of-bounds Write 21575-17084 21575-17084 Important 21575-17084 8.6 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.650-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 1.0 2026-07-11T01:06:33 <p>Information published.</p> 2.0 2026-07-12T14:58:16 <p>Information published.</p> Mistune block_parser: quadratic-time parsing on long lists of repeated reference-link definitions Mariner GitHub_M Yes CVE-2026-59928 Inefficient Algorithmic Complexity 21576-17084 21576-17084 Important 21576-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21576-17084 1.0 2026-07-11T01:06:53 <p>Information published.</p> Mistune plugins/formatting: quadratic-time parsing on long runs of `~~x~~`, `==x==`, and `^^x^^` markers (strikethrough / mark / insert) Mariner GitHub_M Yes CVE-2026-59922 Inefficient Algorithmic Complexity 21576-17084 21576-17084 Important 21576-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21576-17084 1.0 2026-07-11T01:07:11 <p>Information published.</p> js-yaml: YAML merge-key chains can force quadratic CPU consumption Mariner GitHub_M Yes CVE-2026-59869 Inefficient Algorithmic Complexity 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 1.0 2026-07-11T01:07:43 <p>Information published.</p> NATS Server: Pre-auth server crash via double INFO in leafnode handshake Mariner GitHub_M Yes CVE-2026-58250 NULL Pointer Dereference 21481-17084 21481-17084 Moderate 21481-17084 7.5 6.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U 21481-17084 CBL-Mariner Releases 21481-17084 No Security Update 1.31.0-24 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21481-17084 CBL-Mariner Releases 1.0 2026-07-11T01:08:08 <p>Information published.</p> 2.0 2026-07-15T01:41:08 <p>Information published.</p> Incremental HTMLParser feed() allows CPU-exhaustion DoS via repeated unterminated markup declarations Mariner PSF Yes CVE-2026-15308 Uncontrolled Resource Consumption 21492-17084 21021-17084 21492-17084 21021-17084 Important 21492-17084 Important 21021-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21492-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21021-17084 1.0 2026-07-12T01:01:27 <p>Information published.</p> 2.0 2026-07-13T14:41:16 <p>Information published.</p> 3.0 2026-07-15T01:03:21 <p>Information published.</p> node-tar: Process crash via PAX numeric path type confusion Mariner GitHub_M Yes CVE-2026-59871 Incorrect Type Conversion or Cast 20131-17084 20131-17084 Moderate 20131-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 20131-17084 1.0 2026-07-12T01:01:34 <p>Information published.</p> 2.0 2026-07-13T14:41:21 <p>Information published.</p> node-tar: Decompression/parse DoS via unlimited input Mariner GitHub_M Yes CVE-2026-59873 Allocation of Resources Without Limits or Throttling 20131-17084 20131-17084 Critical 20131-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20131-17084 1.0 2026-07-12T01:01:40 <p>Information published.</p> 2.0 2026-07-13T14:41:27 <p>Information published.</p> node-tar: Negative tar entry size causes infinite loop in archive replace Mariner GitHub_M Yes CVE-2026-59874 Loop with Unreachable Exit Condition ('Infinite Loop') 20131-17084 20131-17084 Important 20131-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 20131-17084 1.0 2026-07-12T01:01:47 <p>Information published.</p> 2.0 2026-07-13T14:41:33 <p>Information published.</p> Stack-based buffer overflow in gawk Mariner CERT-PL Yes CVE-2026-40553 Stack-based Buffer Overflow 21582-17084 21582-17084 Moderate 21582-17084 1.0 2026-07-14T01:01:22 <p>Information published.</p> Heap buffer overflow in gawk Mariner CERT-PL Yes CVE-2026-40469 Integer Overflow or Wraparound 21582-17084 21582-17084 Moderate 21582-17084 1.0 2026-07-14T01:01:29 <p>Information published.</p> Use after free in gawk Mariner CERT-PL Yes CVE-2026-40467 Use After Free 21582-17084 21582-17084 Moderate 21582-17084 1.0 2026-07-14T01:01:41 <p>Information published.</p> Perl versions through 5.43.9 produce silently incorrect regular expression matches when an alternation of more than 65535 fixed string branches is compiled into a trie in Perl_study_chunk Mariner CPANSec Yes CVE-2026-13221 Integer Overflow or Wraparound 21504-17084 21504-17084 Moderate 21504-17084 4.0 4.0 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N 21504-17084 CBL-Mariner Releases 21504-17084 No Security Update 5.38.2-513 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21504-17084 CBL-Mariner Releases 1.0 2026-07-15T01:01:27 <p>Information published.</p> node-tar: Uncaught Exception DoS via NUL byte in PAX path/linkpath records Mariner GitHub_M Yes CVE-2026-59875 Uncaught Exception 20131-17084 20131-17084 Moderate 20131-17084 5.3 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L 20131-17084 1.0 2026-07-15T01:01:52 <p>Information published.</p> GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace Mariner GitHub_M Yes CVE-2026-59831 Inclusion of Functionality from Untrusted Control Sphere 21555-17084 21555-17084 Moderate 21555-17084 4.4 4.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N 21555-17084 CBL-Mariner Releases 21555-17084 No Security Update 2.62.0-19 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21555-17084 CBL-Mariner Releases 2.0 2026-07-16T01:39:07 <p>Information published.</p> 1.0 2026-07-15T01:02:07 <p>Information published.</p> RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS Mariner GitHub_M Yes CVE-2026-57220 Allocation of Resources Without Limits or Throttling 21487-17084 21487-17084 Important 21487-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 1.0 2026-07-15T01:02:20 <p>Information published.</p> 2.0 2026-07-22T01:39:55 <p>Information published.</p> RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass Mariner GitHub_M Yes CVE-2026-57217 Incorrect Authorization 21487-17084 21487-17084 Important 21487-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 2.0 2026-07-22T01:40:02 <p>Information published.</p> 1.0 2026-07-15T01:02:26 <p>Information published.</p> RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_tag rendering Mariner GitHub_M Yes CVE-2026-57213 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 21487-17084 21487-17084 Moderate 21487-17084 4.8 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 1.0 2026-07-15T01:02:32 <p>Information published.</p> 2.0 2026-07-22T01:40:10 <p>Information published.</p> RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks Mariner GitHub_M Yes CVE-2026-57216 Improper Authentication 21487-17084 21487-17084 Moderate 21487-17084 6.8 6.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 1.0 2026-07-15T01:02:45 <p>Information published.</p> 2.0 2026-07-22T01:40:25 <p>Information published.</p> RabbitMQ: UNC SSRF affecting the management UI on Windows Mariner GitHub_M Yes CVE-2026-57211 Absolute Path Traversal 21487-17084 21487-17084 Moderate 21487-17084 6.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 1.0 2026-07-15T01:03:10 <p>Information published.</p> 2.0 2026-07-22T01:40:56 <p>Information published.</p> RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-channel injection and persistent phantom Mariner GitHub_M Yes CVE-2026-57215 Incorrect Authorization 21487-17084 21487-17084 Important 21487-17084 CBL-Mariner Releases 21487-17084 No Security Update 3.13.7-7 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21487-17084 CBL-Mariner Releases 1.0 2026-07-15T01:03:16 <p>Information published.</p> 2.0 2026-07-22T01:41:04 <p>Information published.</p> Libsoup: soupwebsocketconnection: libsoup: websocket remote denial of service via oversized control frame protocol violation Mariner redhat Yes CVE-2026-15711 Allocation of Resources Without Limits or Throttling 21478-17084 21478-17084 Important 21478-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21478-17084 1.0 2026-07-17T01:01:32 <p>Information published.</p> Soupwebsocketextensiondeflate: libsoup: libsoup: websocket permessage-deflate unbounded decompression remote denial of service Mariner redhat Yes CVE-2026-15709 Improper Handling of Highly Compressed Data (Data Amplification) 21478-17084 21478-17084 Important 21478-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21478-17084 1.0 2026-07-17T01:01:57 <p>Information published.</p> Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record Mariner CPANSec Yes CVE-2026-57433 Integer Overflow or Wraparound 21504-17084 21504-17084 Critical 21504-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21504-17084 CBL-Mariner Releases 21504-17084 No Security Update 5.38.2-514 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21504-17084 CBL-Mariner Releases 2.0 2026-07-21T01:41:02 <p>Information published.</p> 1.0 2026-07-17T01:02:03 <p>Information published.</p> DBI::SQL::Nano versions from 1.42 before 1.651 for Perl have inverted <= and >= SQL operators on text Mariner CPANSec Yes CVE-2026-15043 Use of Incorrect Operator 21575-17084 21575-17084 Critical 21575-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.651-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 1.0 2026-07-17T01:02:10 <p>Information published.</p> 2.0 2026-07-21T01:41:10 <p>Information published.</p> DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location Mariner CPANSec Yes CVE-2026-15392 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 21575-17084 21575-17084 Important 21575-17084 7.7 7.7 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N 21575-17084 CBL-Mariner Releases 21575-17084 No Security Update 1.651-1 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21575-17084 CBL-Mariner Releases 1.0 2026-07-17T01:02:22 <p>Information published.</p> 2.0 2026-07-21T01:41:24 <p>Information published.</p> pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service Mariner GitHub_M Yes CVE-2026-59885 Uncontrolled Resource Consumption 21138-17084 21138-17084 Important 21138-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21138-17084 CBL-Mariner Releases 21138-17084 No Security Update 0.4.8-3 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21138-17084 CBL-Mariner Releases 1.0 2026-07-17T01:02:35 <p>Information published.</p> 2.0 2026-07-22T01:41:14 <p>Information published.</p> Squid: Memory corruption in cache_digest reply handling Mariner GitHub_M Yes CVE-2026-50012 Improper Input Validation 21586-17084 21586-17084 Moderate 21586-17084 5.5 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H 21586-17084 1.0 2026-07-18T01:01:40 <p>Information published.</p> Excon: redact additional sensitive/risky headers when following redirects Mariner GitHub_M Yes CVE-2026-54171 Insertion of Sensitive Information Into Sent Data 21587-17084 21587-17084 Moderate 21587-17084 6.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N 21587-17084 2.0 2026-07-20T14:39:56 <p>Information published.</p> 1.0 2026-07-19T01:01:26 <p>Information published.</p> rust-openssl: Potential out-of-bounds write in `CipherCtxRef::cipher_update_inplace` for AES-KW-PAD ciphers Mariner GitHub_M Yes CVE-2026-45784 Incorrect Calculation of Buffer Size 21588-17084 21500-17084 21514-17084 21401-17084 21568-17084 21165-17084 21588-17084 21500-17084 21514-17084 21401-17084 21568-17084 21165-17084 Moderate 21588-17084 Moderate 21500-17084 Moderate 21514-17084 Moderate 21401-17084 Moderate 21568-17084 Moderate 21165-17084 1.0 2026-07-19T01:01:49 <p>Information published.</p> 2.0 2026-07-20T01:40:39 <p>Information published.</p> A heap overflow in the evalcommand() function (shell/ash.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input. Mariner mitre Yes CVE-2026-38755 Heap-based Buffer Overflow 21396-17084 21396-17084 Important 21396-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21396-17084 CBL-Mariner Releases 21396-17084 No Security Update 1.36.1-25 https://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade 21396-17084 CBL-Mariner Releases 2.0 2026-07-20T14:40:20 <p>Information published.</p> 1.0 2026-07-19T01:02:02 <p>Information published.</p> 3.0 2026-07-21T01:42:02 <p>Information published.</p> NGINX ngx_http_slice_module vulnerability Mariner f5 Yes CVE-2026-60005 Use of Uninitialized Resource 21527-17084 21527-17084 Important 21527-17084 8.2 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H 21527-17084 1.0 2026-07-19T01:02:08 <p>Information published.</p> 2.0 2026-07-20T14:40:26 <p>Information published.</p> ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS Mariner VulnCheck Yes CVE-2026-62389 Allocation of Resources Without Limits or Throttling 19693-17084 19693-17084 Important 19693-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 19693-17084 1.0 2026-07-19T01:02:26 <p>Information published.</p> 2.0 2026-07-20T01:40:45 <p>Information published.</p> crypto: nx - fix nx_crypto_ctx_exit argument Mariner Linux Yes CVE-2026-63805 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-20T01:01:30 <p>Information published.</p> 2.0 2026-07-20T14:40:55 <p>Information published.</p> f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode Mariner Linux Yes CVE-2026-63816 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:01:36 <p>Information published.</p> 2.0 2026-07-20T14:41:01 <p>Information published.</p> gcov: use atomic counter updates to fix concurrent access crashes Mariner Linux Yes CVE-2026-63825 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 2.0 2026-07-20T14:41:06 <p>Information published.</p> 1.0 2026-07-20T01:01:43 <p>Information published.</p> drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring Mariner Linux Yes CVE-2026-63853 21580-17084 21580-17084 Important 21580-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:01:55 <p>Information published.</p> 2.0 2026-07-20T14:41:18 <p>Information published.</p> fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Mariner Linux Yes CVE-2026-53402 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-20T01:02:01 <p>Information published.</p> 2.0 2026-07-20T14:41:24 <p>Information published.</p> f2fs: fix to do sanity check on f2fs_get_node_folio_ra() Mariner Linux Yes CVE-2026-63819 21580-17084 21580-17084 Moderate 21580-17084 5.0 5.0 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-20T01:02:08 <p>Information published.</p> 2.0 2026-07-20T14:41:29 <p>Information published.</p> fbdev: omap2: fix use-after-free in omapfb_mmap Mariner Linux Yes CVE-2026-53401 21580-17084 21580-17084 Important 21580-17084 7.0 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:02:20 <p>Information published.</p> 2.0 2026-07-20T14:41:41 <p>Information published.</p> f2fs: read COW data with the original inode during atomic write Mariner Linux Yes CVE-2026-63811 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 21580-17084 2.0 2026-07-20T14:41:46 <p>Information published.</p> 1.0 2026-07-20T01:02:26 <p>Information published.</p> ntfs: serialize volume label accesses Mariner Linux Yes CVE-2026-63793 21580-17084 21580-17084 Important 21580-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-20T01:02:45 <p>Information published.</p> 2.0 2026-07-20T14:42:04 <p>Information published.</p> fbdev: Fix fb_new_modelist to prevent null-ptr-deref in fb_videomode_to_var Mariner Linux Yes CVE-2026-53403 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:02:51 <p>Information published.</p> 2.0 2026-07-20T14:42:10 <p>Information published.</p> drm/msm: always recover the gpu Mariner Linux Yes CVE-2026-53377 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 2.0 2026-07-20T14:42:27 <p>Information published.</p> 1.0 2026-07-20T01:03:10 <p>Information published.</p> f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage Mariner Linux Yes CVE-2026-53368 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21580-17084 1.0 2026-07-20T01:03:16 <p>Information published.</p> 2.0 2026-07-20T14:42:32 <p>Information published.</p> i2c: core: fix adapter registration race Mariner Linux Yes CVE-2026-53400 21580-17084 21580-17084 Important 21580-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-20T01:03:23 <p>Information published.</p> 2.0 2026-07-20T14:42:38 <p>Information published.</p> Bluetooth: ISO: Fix data-race on iso_pi fields in hci_get_route calls Mariner Linux Yes CVE-2026-63871 21580-17084 21580-17084 Moderate 21580-17084 6.3 6.3 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-20T01:03:35 <p>Information published.</p> 2.0 2026-07-20T14:42:49 <p>Information published.</p> esp: fix page frag reference leak on skb_to_sgvec failure Mariner Linux Yes CVE-2026-63872 21580-17084 21580-17084 Important 21580-17084 7.5 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-20T01:03:41 <p>Information published.</p> 2.0 2026-07-20T14:42:55 <p>Information published.</p> nfsd: release layout stid on setlease failure Mariner Linux Yes CVE-2026-53399 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-20T01:03:47 <p>Information published.</p> 2.0 2026-07-20T14:43:00 <p>Information published.</p> netfilter: nf_tables: add hook transactions for device deletions Mariner Linux Yes CVE-2026-63858 21580-17084 21580-17084 Important 21580-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:04:00 <p>Information published.</p> 2.0 2026-07-20T14:43:12 <p>Information published.</p> f2fs: validate orphan inode entry count Mariner Linux Yes CVE-2026-63818 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:04:06 <p>Information published.</p> 2.0 2026-07-20T14:43:17 <p>Information published.</p> wifi: mt76: add wcid publish check in mt76_sta_add Mariner Linux Yes CVE-2026-63832 21580-17084 21580-17084 Important 21580-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:04:24 <p>Information published.</p> 2.0 2026-07-20T14:43:34 <p>Information published.</p> iio: light: veml6075: add bounds check to veml6075_it_ms index Mariner Linux Yes CVE-2026-53387 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-20T01:04:31 <p>Information published.</p> 2.0 2026-07-20T14:43:40 <p>Information published.</p> batman-adv: v: prevent OGM aggregation on disabled hardif Mariner Linux Yes CVE-2026-63835 21474-17084 21474-17084 Moderate 21474-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:04:50 <p>Information published.</p> 2.0 2026-07-20T14:43:57 <p>Information published.</p> KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level Mariner Linux Yes CVE-2026-63807 21474-17084 21474-17084 Important 21474-17084 8.8 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:44:03 <p>Information published.</p> 1.0 2026-07-20T01:04:56 <p>Information published.</p> serial: 8250_dw: unregister 8250 port if clk_notifier_register() fails Mariner Linux Yes CVE-2026-53384 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:05:15 <p>Information published.</p> 2.0 2026-07-20T14:44:19 <p>Information published.</p> net: skmsg: preserve sg.copy across SG transforms Mariner Linux Yes CVE-2026-63830 21474-17084 21474-17084 Moderate 21474-17084 4.4 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N 21474-17084 1.0 2026-07-20T01:05:21 <p>Information published.</p> 2.0 2026-07-20T14:44:25 <p>Information published.</p> fuse: re-lock request before replacing page cache folio Mariner Linux Yes CVE-2026-53388 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:44:42 <p>Information published.</p> 1.0 2026-07-20T01:05:40 <p>Information published.</p> KVM: SVM: Fix page overflow in sev_dbg_crypt() for ENCRYPT path Mariner Linux Yes CVE-2026-63794 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:44:48 <p>Information published.</p> 1.0 2026-07-20T01:05:46 <p>Information published.</p> wifi: rtw88: usb: fix memory leaks on USB write failures Mariner Linux Yes CVE-2026-63821 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:06:05 <p>Information published.</p> 2.0 2026-07-20T14:45:05 <p>Information published.</p> KEYS: fix overflow in keyctl_pkey_params_get_2() Mariner Linux Yes CVE-2026-63824 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:06:11 <p>Information published.</p> 2.0 2026-07-21T01:44:03 <p>Information published.</p> 1.1 2026-07-20T14:45:10 <p>Information published.</p> irqchip/imgpdc: Fix resource leak, add missing chained handler cleanup on remove Mariner Linux Yes CVE-2026-63798 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:06:17 <p>Information published.</p> 2.0 2026-07-20T14:45:16 <p>Information published.</p> keys: Pin request_key_auth payload in instantiate paths Mariner Linux Yes CVE-2026-63823 21474-17084 21474-17084 Important 21474-17084 8.4 8.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:45:22 <p>Information published.</p> 1.0 2026-07-20T01:06:24 <p>Information published.</p> pNFS: Fix use-after-free in pnfs_update_layout() Mariner Linux Yes CVE-2026-63800 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:06:30 <p>Information published.</p> 1.1 2026-07-20T14:45:28 <p>Information published.</p> 2.0 2026-07-21T01:44:14 <p>Information published.</p> rpmsg: char: Fix use-after-free on probe error path Mariner Linux Yes CVE-2026-63797 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:45:33 <p>Information published.</p> 1.0 2026-07-20T01:06:36 <p>Information published.</p> f2fs: validate compress cache inode only when enabled Mariner Linux Yes CVE-2026-63817 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21474-17084 2.0 2026-07-20T14:45:45 <p>Information published.</p> 1.0 2026-07-20T01:06:49 <p>Information published.</p> gfs2: fix use-after-free in gfs2_qd_dealloc Mariner Linux Yes CVE-2026-63804 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:45:51 <p>Information published.</p> 1.0 2026-07-20T01:06:55 <p>Information published.</p> mac802154: llsec: add skb_cow_data() before in-place crypto Mariner Linux Yes CVE-2026-63831 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.1 2026-07-20T14:45:56 <p>Information published.</p> 1.0 2026-07-20T01:07:01 <p>Information published.</p> 2.0 2026-07-21T01:44:33 <p>Information published.</p> blk-cgroup: fix UAF in __blkcg_rstat_flush() Mariner Linux Yes CVE-2026-63802 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 2.0 2026-07-20T14:46:02 <p>Information published.</p> 1.0 2026-07-20T01:07:07 <p>Information published.</p> vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write Mariner Linux Yes CVE-2026-53385 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:07:20 <p>Information published.</p> 2.0 2026-07-20T14:46:13 <p>Information published.</p> ksmbd: fix out-of-bounds read in smb_check_perm_dacl() Mariner Linux Yes CVE-2026-53390 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21474-17084 2.0 2026-07-20T14:46:19 <p>Information published.</p> 1.0 2026-07-20T01:07:26 <p>Information published.</p> f2fs: validate ACL entry sizes in f2fs_acl_from_disk() Mariner Linux Yes CVE-2026-63814 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-20T01:07:45 <p>Information published.</p> 2.0 2026-07-20T14:46:36 <p>Information published.</p> ksmbd: reject non-VALID session in compound request branch Mariner Linux Yes CVE-2026-53383 21474-17084 21474-17084 Important 21474-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H 21474-17084 2.0 2026-07-20T14:46:41 <p>Information published.</p> 1.0 2026-07-20T01:07:51 <p>Information published.</p> NFSD: Fix SECINFO_NO_NAME decode error cleanup Mariner Linux Yes CVE-2026-53398 21474-17084 21474-17084 Moderate 21474-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21474-17084 1.0 2026-07-20T01:08:10 <p>Information published.</p> 2.0 2026-07-20T14:46:58 <p>Information published.</p> apparmor: fix use-after-free in rawdata dedup loop Mariner Linux Yes CVE-2026-63827 21474-17084 21474-17084 Critical 21474-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.1 2026-07-20T14:47:04 <p>Information published.</p> 1.0 2026-07-20T01:08:16 <p>Information published.</p> 2.0 2026-07-21T01:39:47 <p>Information published.</p> hwmon: (lm90) Stop work before releasing hwmon device Mariner Linux Yes CVE-2026-64038 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:01:22 <p>Information published.</p> cgroup/rstat: validate cpu before css_rstat_cpu() access Mariner Linux Yes CVE-2026-64036 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:01:29 <p>Information published.</p> netfilter: x_tables: allocate hook ops while under mutex Mariner Linux Yes CVE-2026-64079 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:01:35 <p>Information published.</p> ALSA: pcm: oss: Fix setup list UAF on proc write error Mariner Linux Yes CVE-2026-64001 21580-17084 21580-17084 Moderate 21580-17084 6.1 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H 21580-17084 1.0 2026-07-21T01:01:48 <p>Information published.</p> netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Mariner Linux Yes CVE-2026-64160 21580-17084 21580-17084 Moderate 21580-17084 5.8 5.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L 21580-17084 1.0 2026-07-21T01:01:54 <p>Information published.</p> ksmbd: validate SID in parent security descriptor during ACL inheritance Mariner Linux Yes CVE-2026-64138 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:02:00 <p>Information published.</p> usb: typec: tcpm/tcpci_maxim: validate header NDO against RX_BYTE_CNT Mariner Linux Yes CVE-2026-63959 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:02:06 <p>Information published.</p> powerpc/hv-gpci: fix preempt count leak in sysfs show paths Mariner Linux Yes CVE-2026-64070 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:02:13 <p>Information published.</p> security/keys: fix missed RCU read section on lookup Mariner Linux Yes CVE-2026-64015 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:02:19 <p>Information published.</p> usb: typec: tcpm: bound altmode_desc[] per iteration in svdm_consume_modes() Mariner Linux Yes CVE-2026-63962 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:02:25 <p>Information published.</p> usb: typec: ucsi: validate connector number in ucsi_connector_change() Mariner Linux Yes CVE-2026-63958 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:02:31 <p>Information published.</p> wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Mariner Linux Yes CVE-2026-64117 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:02:37 <p>Information published.</p> hpfs: fix a crash if hpfs_map_dnode_bitmap fails Mariner Linux Yes CVE-2026-63954 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:02:44 <p>Information published.</p> netfilter: x_tables: add and use xtables_unregister_table_exit Mariner Linux Yes CVE-2026-64078 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:02:56 <p>Information published.</p> net/sched: fix packet loop on netem when duplicate is on Mariner Linux Yes CVE-2026-63983 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:03:15 <p>Information published.</p> usb: typec: ucsi: ccg: reject firmware images without a ':' record header Mariner Linux Yes CVE-2026-63964 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:03:23 <p>Information published.</p> usb: typec: wcove: don't write past struct pd_message in wcove_read_rx_buffer() Mariner Linux Yes CVE-2026-63960 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:03:29 <p>Information published.</p> drm/amdkfd: fix a vulnerability of integer overflow in kfd debugger Mariner Linux Yes CVE-2026-63881 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:03:35 <p>Information published.</p> usb: typec: altmodes/displayport: validate count before reading Status Update VDO Mariner Linux Yes CVE-2026-63961 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:03:41 <p>Information published.</p> usb: typec: tcpm: validate VDO count in Discover Identity ACK handlers Mariner Linux Yes CVE-2026-63963 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:03:48 <p>Information published.</p> lsm: hold cred_guard_mutex for lsm_set_self_attr() Mariner Linux Yes CVE-2026-64111 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:00 <p>Information published.</p> drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() Mariner Linux Yes CVE-2026-64154 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:04:06 <p>Information published.</p> rbd: eliminate a race in lock_dwork draining on unmap Mariner Linux Yes CVE-2026-64112 21580-17084 21580-17084 Important 21580-17084 7.4 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:19 <p>Information published.</p> netfilter: bridge: eb_tables: close module init race Mariner Linux Yes CVE-2026-64076 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:27 <p>Information published.</p> netfs: Fix leak of request in netfs_write_begin() error handling Mariner Linux Yes CVE-2026-64060 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-21T01:04:33 <p>Information published.</p> net/handshake: hand off the pinned file reference to accept_doit Mariner Linux Yes CVE-2026-63979 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:40 <p>Information published.</p> ethtool: rss: fix indir_table and hkey leak on get_rxfh failure Mariner Linux Yes CVE-2026-63999 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:04:52 <p>Information published.</p> net/handshake: Drain pending requests at net namespace exit Mariner Linux Yes CVE-2026-63978 21580-17084 21580-17084 Important 21580-17084 7.1 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H 21580-17084 1.0 2026-07-21T01:04:58 <p>Information published.</p> Bluetooth: hci_sync: Set HCI_CMD_DRAIN_WORKQUEUE during device close Mariner Linux Yes CVE-2026-63974 21580-17084 21580-17084 Critical 21580-17084 9.8 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 21580-17084 1.0 2026-07-21T01:05:04 <p>Information published.</p> riscv: Fix register corruption from uninitialized cregs on error Mariner Linux Yes CVE-2026-64082 21580-17084 21580-17084 Moderate 21580-17084 5.3 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L 21580-17084 1.0 2026-07-21T01:05:16 <p>Information published.</p> A use-after-free in the awk_sub() function (editors/awk.c) of Busybox v1.38.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Mariner mitre Yes CVE-2026-38753 Use After Free 21396-17084 21396-17084 Moderate 21396-17084 4.9 4.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L 21396-17084 1.0 2026-07-21T01:05:23 <p>Information published.</p> 2.0 2026-07-21T14:40:31 <p>Information published.</p> A stack overflow in the evaluate() function (editors/awk.c) of BusyBox commit 371fe9 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AWK script. Mariner mitre Yes CVE-2026-38752 Uncontrolled Recursion 21396-17084 21396-17084 Low 21396-17084 2.9 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L 21396-17084 1.0 2026-07-21T01:05:29 <p>Information published.</p> 2.0 2026-07-21T14:40:37 <p>Information published.</p> Buffer underflow in `H5Iget_name `/`H5G_get_name` if size is zero Mariner GitHub_M Yes CVE-2026-26199 Buffer Underwrite ('Buffer Underflow') 21121-17084 21121-17084 Moderate 21121-17084 1.0 2026-07-22T01:01:26 <p>Information published.</p> xfs: fail recovery on a committed log item with no regions Mariner Linux Yes CVE-2026-64187 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-22T01:01:32 <p>Information published.</p> i2c: i801: fix hardware state machine corruption in error path Mariner Linux Yes CVE-2026-64205 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-22T01:01:44 <p>Information published.</p> net: team: fix NULL pointer dereference in team_xmit during mode change Mariner Linux Yes CVE-2026-64190 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-22T01:01:51 <p>Information published.</p> Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Mariner Linux Yes CVE-2026-64206 21580-17084 21580-17084 Moderate 21580-17084 5.5 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H 21580-17084 1.0 2026-07-22T01:01:57 <p>Information published.</p> i2c: stub: Reject I2C block transfers with invalid length Mariner Linux Yes CVE-2026-64191 21474-17084 21474-17084 Important 21474-17084 7.8 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 21474-17084 1.0 2026-07-22T01:02:16 <p>Information published.</p> SQL injection in syslog-ng SQL destionation driver Mariner GitHub_M Yes CVE-2026-39879 Improper Neutralization of Escape, Meta, or Control Sequences 17458-17084 17458-17084 Important 17458-17084 7.1 7.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H 17458-17084 1.0 2026-07-22T01:02:23 <p>Information published.</p> Microsoft Copilot Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege Hyper-V guest. The attacker could traverse the guest's security boundary to execute code on the Hyper-V host execution environment.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could host a malicious website that causes Microsoft Edge for Android to automatically send crafted prompts to Copilot on a user’s device when the user visits the site. Because the affected component processes these requests without confirmation or origin checks, the prompts may be executed without the user’s awareness, potentially resulting in unintended actions within Copilot such as accessing or modifying data.</p> Microsoft Copilot Microsoft Yes CVE-2026-48561 Improper Neutralization of Special Elements used in a Command ('Command Injection') 21044 21043 Remote Code Execution 21044 Remote Code Execution 21043 Critical 21044 Critical 21043 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21044 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21043 Release Notes https://play.google.com/store/apps/details?id=com.microsoft.emmx&hl=en_US&pli=1 21044 Maybe Security Update https://play.google.com/store/apps/details?id=com.microsoft.emmx&hl=en_US&pli=1 21044 Release Notes Release Notes https://apps.apple.com/us/app/microsoft-edge/id1288723196 21043 Maybe Security Update https://apps.apple.com/us/app/microsoft-edge/id1288723196 21043 Release Notes Ofek Levin Enclave with <a href="https://enclave.ai/">Enclave</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>The attacker must correctly craft convincing spoofed UI chrome, time the full-screen entry, and rely on user perception. While the exploit triggers reliably after a gesture, successful deception depends on careful social engineering and realistic mimicking of browser UI.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would need to click on a specially crafted URL that could present a popup box requesting additional user input.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-45488 User Interface (UI) Misrepresentation of Critical Information 11655 Spoofing 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Moch. Azril <a href="https://www.linkedin.com/in/barathstalin/">Barath Stalin K</a> <a href="https://www.linkedin.com/in/hafiizh-7aa6bb31/">Hafiizh</a> with https://www.linkedin.com/in/hafiizh-7aa6bb31/ FARISSAL B <a href="https://www.linkedin.com/in/francesco-topol-64857a264/">Francesco Jeremy Topol</a> with k4tedu <a href="https://www.linkedin.com/in/alfazhossain/">Alfaz Hossain</a> with <a href="https://piratesofthedeadflag.com/">POTDF</a> <a href="https://x.com/zxyhellzing">xzyhellsing</a> 1.0 2026-07-03T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Elevation of Privilege Vulnerability <p>Improper validation of consistency within input in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Secure Kernel Mode Microsoft Yes CVE-2026-42982 Improper Validation of Consistency within Input 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12242 Critical 12243 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5095051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051 20854 Yes Security Update 10.0.28000.2269 https://support.microsoft.com/help/5095051 20854 5095051 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Arush Agarampur (Microsoft) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain sysadmin privileges.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-47296 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 21372 21563 11478 11821 12048 12053 12145 12147 20748 16785 Elevation of Privilege 21372 Elevation of Privilege 21563 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 12048 Elevation of Privilege 12053 Elevation of Privilege 12145 Elevation of Privilege 12147 Elevation of Privilege 20748 Elevation of Privilege 16785 Important 21372 Important 21563 Important 11478 Important 11821 Important 12048 Important 12053 Important 12145 Important 12147 Important 20748 Important 16785 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21372 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21563 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16785 5101347 https://www.microsoft.com/download/details.aspx?familyid=2c52560b-6fd0-4ceb-8d60-0c540d910d01 21372 Maybe Security Update 16.0.4262.2 https://support.microsoft.com/help/5101347 21372 5101347 5101347 https://support.microsoft.com/help/5101347 21372 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 5102338 https://www.microsoft.com/download/details.aspx?familyid=fa1a9c50-337c-4351-88e3-0874a53e57bb 11478 Maybe Security Update 14.0.2120.1 https://support.microsoft.com/help/5102338 11478 5102338 5102338 https://support.microsoft.com/help/5102338 11478 5102336 https://www.microsoft.com/download/details.aspx?familyid=4f9970c0-88ef-4901-a471-851255f05be8 11821 Maybe Security Update 15.0.2180.2 https://support.microsoft.com/help/5102336 11821 5102336 5102336 https://support.microsoft.com/help/5102336 11821 5102340 https://www.microsoft.com/download/details.aspx?familyid=a84c7105-2738-4d87-bea7-29846cb384ae 12048 Maybe Security Update 13.0.6500.1 https://support.microsoft.com/help/5102340 12048 5102340 5102340 https://support.microsoft.com/help/5102340 12048 5102339 https://www.microsoft.com/download/details.aspx?familyid=6a7d7b5b-d102-4114-b131-899859ecc3cc 12053 Maybe Security Update 13.0.7095.1 https://support.microsoft.com/help/5102339 12053 5102339 5102339 https://support.microsoft.com/help/5102339 12053 5102337 https://www.microsoft.com/download/details.aspx?familyid=22c8589d-8b4f-41a4-a7b3-072a8bd4aa3a 12145 Maybe Security Update 14.0.3540.1 https://support.microsoft.com/help/5102337 12145 5102337 5102337 https://support.microsoft.com/help/5102337 12145 5102334 https://www.microsoft.com/download/details.aspx?familyid=db5e12bd-676a-4324-b736-10053a1d34cf 12147 Maybe Security Update 16.0.1190.2 https://support.microsoft.com/help/5102334 12147 5102334 5102334 https://support.microsoft.com/help/5102334 12147 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 5102335 https://www.microsoft.com/download/details.aspx?familyid=0a742248-b0b1-4008-87ac-32af17ce5f2c 16785 Maybe Security Update 15.0.4480.2 https://support.microsoft.com/help/5096773 16785 5102335 Sharath Unni 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Azure Synapse Elevation of Privilege Vulnerability <p>Improper access control in Azure Synapse allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure Synapse Microsoft No CVE-2026-26145 Improper Access Control 12041 Elevation of Privilege 12041 Critical 12041 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 4.8 4.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C 12041 Anonymous 1.0 2026-07-02T07:00:00 <p>Information published.</p> Azure OpenAI Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Azure OpenAI allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Azure OpenAI Microsoft No CVE-2026-45499 Server-Side Request Forgery (SSRF) 12286 Elevation of Privilege 12286 Critical 12286 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12286 brahim_nah 1.0 2026-07-02T07:00:00 <p>Information published.</p> Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Entra Provisioning Service (SyncFabric) Microsoft No CVE-2026-57100 Server-Side Request Forgery (SSRF) 21532 Elevation of Privilege 21532 Critical 21532 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 21532 Anonymous 1.0 2026-07-02T07:00:00 <p>Information published.</p> Microsoft Exchange Online Elevation of Privilege Vulnerability <p>Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Microsoft Exchange Online Microsoft No CVE-2026-54998 Incorrect Authorization 10133 Elevation of Privilege 10133 Critical 10133 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10133 <a href="https://www.linkedin.com/in/stefanwey/">Stefan Wey</a> with <a href="https://www.alweys.ch/">Alweys | (UMB AG)</a> 1.0 2026-07-02T07:00:00 <p>Information published.</p> Microsoft 365 Copilot Elevation of Privilege Vulnerability <p>Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> M365 Copilot Microsoft No CVE-2026-41106 URL Redirection to Untrusted Site ('Open Redirect') 16765 Elevation of Privilege 16765 Critical 16765 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 9.3 8.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 16765 Vaibhavi Kalgutkar with Microsoft Dan Reimer with Microsoft Henrique Pereira with Microsoft 1.0 2026-07-02T07:00:00 <p>Information published.</p> Windows Terminal Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a client to connect to a malicious server, and that could allow the attacker to gain code execution on the client.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to have a deep understanding of the system. Successful exploitation is not guaranteed and depends on a combination of factors that might include the environment, system configuration, and the presence of additional security measures.</p> Windows Terminal Microsoft Yes CVE-2026-59117 Integer Overflow or Wraparound 21583 Remote Code Execution 21583 Important 21583 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21583 Dhiraj Mishra (@RandomDhiraj) 1.0 2026-07-16T07:00:00 <p>Information published.</p> Windows Media Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could obtain limited memory-related information, specifically a heap address returned by the affected service.</p> Windows Media Microsoft Yes CVE-2026-34349 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/byunghyun10211">Byunghyun Kang</a> with KAIST Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Information Disclosure Vulnerability <p>Cleartext transmission of sensitive information in Windows Ancillary Function Driver for WinSock allows an authorized attacker to disclose information locally.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-34346 Cleartext Transmission of Sensitive Information 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows App Store Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Store allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Microsoft Windows App Store Microsoft Yes CVE-2026-42900 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have to click on a specially crafted URL to be compromised by the attacker.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-45489 Exposed Dangerous Method or Function 11655 Spoofing 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Ofek Levin Enclave with <a href="https://enclave.ai/">Enclave</a> 1.0 2026-07-03T07:00:00 <p>Information published.</p> 1.1 2026-07-12T07:00:00 <p>CWE added. Informational change only.</p> Windows Bluetooth Port Driver Remote Code Execution <p>Heap-based buffer overflow in Windows Bluetooth Port Driver allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?</strong></p> <p>Exploiting this vulnerability requires an attacker to be within Bluetooth range of the target system.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that a user enables Bluetooth and the device set to be discoverable, which is not the default configuration on Windows systems. Once discoverability is enabled, no further user interaction is required for exploitation.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker could attempt to exploit this vulnerability by sending a specially crafted Bluetooth configuration request to a nearby affected device. If successful, this could allow the attacker to run code on the device without needing user interaction or prior access.</p> Windows Bluetooth Port Driver Microsoft Yes CVE-2026-42975 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/philiptsukerman">Philip Tsukerman</a> with <a href="https://paloaltonetworks.com/">Palo Alto Networks</a> Christian Siegert - chrisbsd Hyeon Park (`@_p0her_`) of Korea University <a href="https://x.com/_twinklestar03">TwinkleStar03</a> with <a href="https://devco.re/">DEVCORE Internship Program</a> Hyeon Park (`@_p0her_`) of Korea University 1.0 2026-07-14T07:00:00 <p>Information published.</p> ASP.NET Core Elevation of Privilege Vulnerability <p>Incorrect implementation of authentication algorithm in ASP.NET Core allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> ASP.NET Core Microsoft Yes CVE-2026-47300 Incorrect Implementation of Authentication Algorithm 20839 20838 12414 12416 12415 12432 12433 12434 12459 16767 21581 Elevation of Privilege 20839 Elevation of Privilege 20838 Elevation of Privilege 12414 Elevation of Privilege 12416 Elevation of Privilege 12415 Elevation of Privilege 12432 Elevation of Privilege 12433 Elevation of Privilege 12434 Elevation of Privilege 12459 Elevation of Privilege 16767 Elevation of Privilege 21581 Important 20839 Important 20838 Important 12414 Important 12416 Important 12415 Important 12432 Important 12433 Important 12434 Important 12459 Important 16767 Important 21581 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20839 20838 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12416 12415 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12416 12415 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Lucas Futures Artur Stetsko 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-47302 Allocation of Resources Without Limits or Throttling 20837 12414 12416 12415 11650-10855 11650-10852 11650-10483 11676-11569 11676-11571 11650-10378 11676-11568 11650-10853 11676-11572 11650-10543 11676-11923 11676-11924 11676-11930 11676-11929 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-10852 11677-11571 11677-10853 11677-11572 11677-10816 11677-10855 11863-10378 11650-10816 11650-10379 11863-10379 11863-10483 11863-10543 12079-11924 12079-11931 12079-11929 12079-11930 12079-12098 12079-11923 12079-12099 12079-12097 12079-20438 12079-20437 12079-12242 12079-12243 12079-12389 12079-12390 12079-20854 12079-20853 2472-10378 2472-10543 2472-10483 2472-10379 21581 12459 20838 20839 12432 12433 12434 16767 Denial of Service 20837 Denial of Service 12414 Denial of Service 12416 Denial of Service 12415 Denial of Service 11650-10855 Denial of Service 11650-10852 Denial of Service 11650-10483 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11650-10378 Denial of Service 11676-11568 Denial of Service 11650-10853 Denial of Service 11676-11572 Denial of Service 11650-10543 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11930 Denial of Service 11676-11929 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-10852 Denial of Service 11677-11571 Denial of Service 11677-10853 Denial of Service 11677-11572 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11650-10816 Denial of Service 11650-10379 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11924 Denial of Service 12079-11931 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-12098 Denial of Service 12079-11923 Denial of Service 12079-12099 Denial of Service 12079-12097 Denial of Service 12079-20438 Denial of Service 12079-20437 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12079-20854 Denial of Service 12079-20853 Denial of Service 2472-10378 Denial of Service 2472-10543 Denial of Service 2472-10483 Denial of Service 2472-10379 Denial of Service 21581 Denial of Service 12459 Denial of Service 20838 Denial of Service 20839 Denial of Service 12432 Denial of Service 12433 Denial of Service 12434 Denial of Service 16767 Important 20837 Important 12414 Important 12416 Important 12415 Important 11650-10855 Important 11650-10852 Important 11650-10483 Important 11676-11569 Important 11676-11571 Important 11650-10378 Important 11676-11568 Important 11650-10853 Important 11676-11572 Important 11650-10543 Important 11676-11923 Important 11676-11924 Important 11676-11930 Important 11676-11929 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-10852 Important 11677-11571 Important 11677-10853 Important 11677-11572 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11650-10816 Important 11650-10379 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11924 Important 12079-11931 Important 12079-11929 Important 12079-11930 Important 12079-12098 Important 12079-11923 Important 12079-12099 Important 12079-12097 Important 12079-20438 Important 12079-20437 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12079-20854 Important 12079-20853 Important 2472-10378 Important 2472-10543 Important 2472-10483 Important 2472-10379 Important 21581 Important 12459 Important 20838 Important 20839 Important 12432 Important 12433 Important 12434 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20837 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21581 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12459 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20837 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20837 20838 20839 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12416 12415 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12416 12415 5104032 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10855 11650-10852 11650-10853 11650-10816 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10855 11650-10852 11650-10853 11650-10816 5101007 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11569 11676-11571 11676-11568 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11569 11676-11571 11676-11568 11676-11572 5101008 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11930 11676-11929 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11930 11676-11929 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11924 12079-11923 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11924 12079-11923 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11931 12079-11929 12079-11930 12079-12098 12079-12099 12079-12097 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11931 12079-11929 12079-11930 12079-12098 12079-12099 12079-12097 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20438 12079-20437 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20438 12079-20437 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 12079-20854 12079-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 12079-20854 12079-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12079-20854 12079-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12079-20854 12079-20853 5101002 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10543 2472-10483 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10543 2472-10483 5100985 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Levi Broderick with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> ASP.NET Core Elevation of Privilege Vulnerability <p>Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> ASP.NET Core Microsoft Yes CVE-2026-47303 Authentication Bypass by Assumed-Immutable Data Incorrect Authorization Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') 20839 20838 12414 12415 12432 12416 12433 12434 12459 16767 21581 Elevation of Privilege 20839 Elevation of Privilege 20838 Elevation of Privilege 12414 Elevation of Privilege 12415 Elevation of Privilege 12432 Elevation of Privilege 12416 Elevation of Privilege 12433 Elevation of Privilege 12434 Elevation of Privilege 12459 Elevation of Privilege 16767 Elevation of Privilege 21581 Important 20839 Important 20838 Important 12414 Important 12415 Important 12432 Important 12416 Important 12433 Important 12434 Important 12459 Important 16767 Important 21581 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20839 20838 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Pham Quang Minh 1.0 2026-07-14T07:00:00 <p>Information published.</p> SQL Server ODBC driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in SQL Server ODBC driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does this mean for this vulnerability?</strong></p> <p>An attacker would need specific conditions to be in place (i.e. particular protocol settings, or configurations, etc.) before an attack could succeed, which reduces the likelihood of widespread or opportunistic exploitation.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by setting up a malicious SQL Server and convincing a user or application to connect to it. When the connection is made, the malicious server could send specially crafted network data that triggers the flaw in the affected component, potentially causing the client application to behave unexpectedly or stop responding.</p> SQL Server ODBC driver Microsoft Yes CVE-2026-42990 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5095051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051 20854 Yes Security Update 10.0.28000.2269 https://support.microsoft.com/help/5095051 20854 5095051 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5094042 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094042 5087470 10378 10379 Yes Monthly Rollup 6.2.9200.26132 https://support.microsoft.com/help/5094042 10378 10379 5094042 5094041 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094041 5087471 10483 10543 Yes Monthly Rollup 6.3.9600.23228 https://support.microsoft.com/help/5094041 10483 10543 5094041 Mathias Vorreiter Pedersen with <a href="https://microsoft.com/">Microsoft</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows App Package Installer Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows App Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows App Installer Microsoft Yes CVE-2026-48572 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20854 20853 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20854 Elevation of Privilege 20853 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5095051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051 20854 Yes Security Update 10.0.28000.2269 https://support.microsoft.com/help/5095051 20854 5095051 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows App Package Installer Elevation of Privilege Vulnerability <p>Use after free in Windows App Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows App Installer Microsoft Yes CVE-2026-48571 Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5095051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051 20854 Yes Security Update 10.0.28000.2269 https://support.microsoft.com/help/5095051 20854 5095051 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Brokering File System Microsoft Yes CVE-2026-49162 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/bad_jubies">Grant Hume</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Active Directory Domain Services allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> Active Directory Domain Services Microsoft Yes CVE-2026-49164 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Linzishan &amp; Anemone &amp; Zhiniang Peng (HUST) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows App Store Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft Windows App Store allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> Microsoft Windows App Store Microsoft Yes CVE-2026-49165 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Print Configuration Elevation of Privilege Vulnerability <p>Use after free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Printer Drivers Microsoft Yes CVE-2026-49166 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Windows Kernel Microsoft Yes CVE-2026-49167 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 hazard 1.0 2026-07-14T07:00:00 <p>Information published.</p> Storage Spaces Direct Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Storage Spaces Direct Microsoft Yes CVE-2026-49168 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Use after free in DNS Server allows an authorized attacker to execute code over a network.</p> Role: DNS Server Microsoft Yes CVE-2026-49169 Use After Free 12437 12436 Remote Code Execution 12437 Remote Code Execution 12436 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 pwnky 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows StateRepository API Server file Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Windows StateRepository API allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows StateRepository API Microsoft Yes CVE-2026-49170 Insufficient Granularity of Access Control Improper Authorization 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 pwnky 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Speech Runtime Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows Speech allows an authorized attacker to elevate privileges locally.</p> Microsoft Windows Speech Microsoft Yes CVE-2026-49171 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 k0shl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows WalletService Elevation of Privilege Vulnerability <p>Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally.</p> Windows WalletService Microsoft Yes CVE-2026-49176 Improper Privilege Management Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://x.com/cplearns2h4ck">Chen Le Qi (@cplearns2h4ck)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> & <a href="https://x.com/cplearns2h4ck">Nguyn ng Nguyn (@MochiNishimiya)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DNS Client Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-49175 Heap-based Buffer Overflow 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> pwn2addr 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows FTP Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending specially crafted FTP commands that exceed the expected length to a vulnerable FTP service. When the service processes and logs these oversized commands, it may write beyond the bounds of allocated memory, causing memory corruption that could lead to a service crash or allow code execution.</p> Windows FTP Service Microsoft Yes CVE-2026-49172 Heap-based Buffer Overflow 20438 12436 11930 11924 11568 12242 20437 12389 12098 10852 11923 12097 12243 20853 20854 11931 11572 12437 12099 12390 11929 11571 11569 Remote Code Execution 20438 Remote Code Execution 12436 Remote Code Execution 11930 Remote Code Execution 11924 Remote Code Execution 11568 Remote Code Execution 12242 Remote Code Execution 20437 Remote Code Execution 12389 Remote Code Execution 12098 Remote Code Execution 10852 Remote Code Execution 11923 Remote Code Execution 12097 Remote Code Execution 12243 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 11931 Remote Code Execution 11572 Remote Code Execution 12437 Remote Code Execution 12099 Remote Code Execution 12390 Remote Code Execution 11929 Remote Code Execution 11571 Remote Code Execution 11569 Important 20438 Important 12436 Important 11930 Important 11924 Important 11568 Important 12242 Important 20437 Important 12389 Important 12098 Important 10852 Important 11923 Important 12097 Important 12243 Important 20853 Important 20854 Important 11931 Important 11572 Important 12437 Important 12099 Important 12390 Important 11929 Important 11571 Important 11569 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20438 20437 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20438 20437 5101650 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12436 12437 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12436 12437 5099536 5099536 https://support.microsoft.com/help/5099536 12436 12437 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11930 11931 11929 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11930 11931 11929 5099539 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11924 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11924 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11924 11923 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11572 11571 11569 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11572 11571 11569 5099538 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12098 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12098 12097 12099 5099539 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 5099535 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Linzishan &amp; Anemone&amp; Zhiniang Peng (HUST) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-49173 Use After Free 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Owen McCullough with Microsoft haowei yan &amp; xiaozun tang 1.0 2026-07-14T07:00:00 <p>Information published.</p> DNS Client Tampering Vulnerability <p>Missing authentication for critical function in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.</p> Windows DNS Microsoft Yes CVE-2026-49174 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11923 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11929 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11930 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11931 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12097 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12098 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12099 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12437 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 20437 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 20438 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12389 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12390 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12436 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 20853 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Sneha Ravichandran with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows TCP/IP Information Disclosure Vulnerability <p>Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.</p> Windows TCP/IP Microsoft Yes CVE-2026-49177 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft Red Team (MRT) with Microsoft <a href="https://www.talosintelligence.com/">KPC of Cisco Talos</a> with <a href="https://www.talosintelligence.com/vulnerability_reports">Cisco Talos</a> Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows App Store Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Microsoft Windows App Store Microsoft Yes CVE-2026-49784 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-50506 Allocation of Resources Without Limits or Throttling 21348 21349 Denial of Service 21348 Denial of Service 21349 Important 21348 Important 21349 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21348 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21349 Release Notes 21348 Maybe Security Update 9.5.0[SX1] https://www.nuget.org/packages/Microsoft.AspNetCore.OData/ 21348 Release Notes Release Notes 21349 Maybe Security Update 7.8.0 https://www.nuget.org/packages/Microsoft.AspNet.OData 21349 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability <p>Insufficiently protected credentials in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could expose a sign-in access token for a user’s work account. If disclosed, that token could allow access to data and services that the user is authorized to use, potentially including sensitive organizational information.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user would have be enticed to open a malicious file in vscode. Users should never open anything that they do not know or trust to be safe.</p> GitHub Copilot and Visual Studio Code Microsoft Yes CVE-2026-47282 Insufficiently Protected Credentials Exposure of Sensitive Information to an Unauthorized Actor 11622 Information Disclosure 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.128.1 https://code.visualstudio.com/updates/v1_128 11622 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Visual Studio Code sensitive file protections.</p> Visual Studio Code Microsoft Yes CVE-2026-45496 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.128.1 https://code.visualstudio.com/updates/v1_128 11622 Release Notes <a href="https://www.linkedin.com/in/tarek-nakkouch/">Tarek Nakkouch</a> <a href="https://github.com/samer666569">陳宥升 (CheN..)</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Game: Age of Empires II: Definitive Edition Remote Code Execution Vulnerability <p>Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker could create a specially crafted game scenario file and convince a user to open it, which allows the file to write content outside the intended game directory. By doing this, the attacker can place malicious files in unexpected locations, potentially enabling code to run on the affected system.</p> Age of Empires II: Definitive Edition Game Microsoft Yes CVE-2026-50663 Relative Path Traversal 21461 Remote Code Execution 21461 Important 21461 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21461 Release Notes https://www.ageofempires.com/news/age-of-empires-ii-definitive-edition-update-177723/ 21461 Maybe Security Update 101.103.46651.0 https://www.ageofempires.com/news/age-of-empires-ii-definitive-edition-update-177723/ 21461 Release Notes <a href="https://x.com/rdjgr">Rick de Jager</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-54983 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50695 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Use after free in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> Windows Hyper-V Microsoft Yes CVE-2026-54129 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Nicola Stauffer working with <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Quality Windows Audio/Video Experience (QWAVE) Elevation of Privilege Vulnerability <p>Use after free in Quality Windows Audio/Video Experience (QWAVE) service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Quality Windows Audio/Video Experience (QWAVE) service Microsoft Yes CVE-2026-54989 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Marin Duroyon 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Windows Overlay Filter Microsoft Yes CVE-2026-54987 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/cplearns2h4ck">Chen Le Qi (@cplearns2h4ck)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability <p>Heap-based buffer overflow in Windows Internet Key Exchange (IKE) Protocol allows an unauthorized attacker to deny service over a network.</p> Windows Internet Key Exchange (IKE) Protocol Microsoft Yes CVE-2026-50696 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by persuading a user to connect to a malicious Remote Desktop Protocol (RDP) server using a vulnerable RDP client. The malicious server could send specially crafted responses that trigger memory corruption on the client system, potentially allowing arbitrary code execution in the context of the logged-on user. Successful exploitation requires user interaction to establish the RDP connection.</p> Remote Desktop Client Microsoft Yes CVE-2026-54990 Heap-based Buffer Overflow 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> pwn2addr Thanatos Tian &amp; PB18 &amp; @2st__ with Diffract 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.</p> Windows Common Log File System Driver Microsoft Yes CVE-2026-50697 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 sweetchip dd484a5a34dd0f6d5330345ffe642dfc 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-55000 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/zeifan">Nafiez</a> with <a href="https://zeifan.my/">NLab Security</a> <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Universal Print Management Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is Kernel memory read - unintentional read access to memory contents in kernel space from a user mode process.</p> Windows USB Print Driver Microsoft Yes CVE-2026-54111 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Out-of-bounds Read 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-54991 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Out-of-bounds Read 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could execute code in the kernel.</p> Windows Kernel Microsoft Yes CVE-2026-54132 Heap-based Buffer Overflow 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 20437 20438 12389 12390 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 pwn2addr 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Windows Win32K Microsoft Yes CVE-2026-54107 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/pravin-choudhary-b9515b29a/">Pravin Choudhary</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-54986 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-54993 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Active Directory Domain Services Elevation of Privilege Vulnerability <p>Improper certificate validation in Windows Active Directory allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> Windows Active Directory Microsoft Yes CVE-2026-55001 Improper Certificate Validation 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Windows Win32K Microsoft Yes CVE-2026-54112 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 LC with VGCO - Vietnam Germany Connection 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Print Configuration Elevation of Privilege Vulnerability <p>Double free in Microsoft Printer Drivers allows an authorized attacker to elevate privileges locally.</p> Microsoft Printer Drivers Microsoft Yes CVE-2026-55004 Double Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Q4n with Kunlun Lab and Zhiniang Peng with HUST Q4n with Kunlun Lab and Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-54992 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-54109 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?</strong></p> <p>This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.</p> Reliable Multicast Transport Driver (RMCAST) Microsoft Yes CVE-2026-54982 Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> haowei yan haowei yan 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> Windows Win32K Microsoft Yes CVE-2026-54114 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows USB Print Driver Microsoft Yes CVE-2026-54996 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Out-of-bounds Read 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Denial of Service Vulnerability <p>Loop with unreachable exit condition ('infinite loop') in Windows Active Directory allows an unauthorized attacker to deny service over a network.</p> Windows Active Directory Microsoft Yes CVE-2026-54119 Loop with Unreachable Exit Condition ('Infinite Loop') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.</p> Windows SMB Microsoft Yes CVE-2026-54997 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows TCP/IP Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows TCP/IP allows an unauthorized attacker to execute code over an adjacent network.</p> Windows TCP/IP Microsoft Yes CVE-2026-54999 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Owen McCullough with MSRC V&M 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?</strong></p> <p>An unauthorized attacker must wait for a user to initiate a connection.</p> Windows RDP Microsoft Yes CVE-2026-55003 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability <p>Use after free in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over a network.</p> Reliable Multicast Transport Driver (RMCAST) Microsoft Yes CVE-2026-54995 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows GDI+ Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>Exploitation of this vulnerability requires that an attacker send a malicious link to the victim via email, or that they convince the user to click the link, typically by way of an enticement in an email or Instant Messenger message. In the worst-case email attack scenario, an attacker could send a specially crafted email to the user without a requirement that the victim open, read, or click on the link. This could result in the attacker executing remote code on the victim's machine. When multiple attack vectors can be used, we assign a score based on the scenario with the higher risk (UI:N).</p> Windows GDI+ Microsoft Yes CVE-2026-54122 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Exchange Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-55005 Heap-based Buffer Overflow 12039 16792 12502 12293 Remote Code Execution 12039 Remote Code Execution 16792 Remote Code Execution 12502 Remote Code Execution 12293 Important 12039 Important 16792 Important 12502 Important 12293 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 5103215 5094144 12039 Yes Security Update 15.01.2507.071 https://support.microsoft.com/help/5103215 12039 5103215 5103212 https://www.microsoft.com/en-us/download/details.aspx?id=108746 5094139 16792 Yes Security Update 15.02.2562.045 https://support.microsoft.com/help/5103212 16792 5103212 5103213 5094140 12502 Yes Security Update 15.02.1748.048 https://support.microsoft.com/help/5103213 12502 5103213 5103214 5094142 12293 Yes Security Update 15.02.1544.043 https://support.microsoft.com/help/5103214 12293 5103214 kunlun Lab & GLM kunlun Lab & GLM 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-55006 Insufficient Granularity of Access Control 12293 12502 12039 16792 Elevation of Privilege 12293 Elevation of Privilege 12502 Elevation of Privilege 12039 Elevation of Privilege 16792 Important 12293 Important 12502 Important 12039 Important 16792 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 5103214 5094142 12293 Yes Security Update 15.02.1544.043 https://support.microsoft.com/help/5103214 12293 5103214 5103213 5094140 12502 Yes Security Update 15.02.1748.048 https://support.microsoft.com/help/5103213 12502 5103213 5103215 5094144 12039 Yes Security Update 15.01.2507.071 https://support.microsoft.com/help/5103215 12039 5103215 5103212 https://www.microsoft.com/en-us/download/details.aspx?id=108746 5094139 16792 Yes Security Update 15.02.2562.045 https://support.microsoft.com/help/5103212 16792 5103212 MARIOS GYFTOS 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Exchange Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.</p> <p>Microsoft recommends installing the July 2026 Security Updates for your version of Exchange Server to be protected from this vulnerability. Customers who have installed the July 2026 Security Updates on all affected Exchange servers are fully protected and may safely remove the <a href="https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42897">CVE-2026-42897</a> mitigation (which is similar in nature and mitigates CVE-2026-55008 also). Microsoft recommends keeping the Emergency Mitigation (EM) Service enabled to receive future emergency mitigations and security protections. For additional information, please see the <a href="https://techcommunity.microsoft.com/blog/exchange/released-july-2026-exchange-server-security-updates/4534146">Exchange blog post</a>.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this issue by sending a specifically crafted malicious email to the user. If the user opens this email, in Outlook Web Access, and certain conditions are met, arbitrary execution of JavaScript would occur in the browser context.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-55008 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 12039 12293 12502 16792 Spoofing 12039 Spoofing 12293 Spoofing 12502 Spoofing 16792 Critical 12039 Critical 12293 Critical 12502 Critical 16792 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 5103215 5094144 12039 Yes Security Update 15.01.2507.071 https://support.microsoft.com/help/5103215 12039 5103215 5103214 5094142 12293 Yes Security Update 15.02.1544.043 https://support.microsoft.com/help/5103214 12293 5103214 5103213 5094140 12502 Yes Security Update 15.02.1748.048 https://support.microsoft.com/help/5103213 12502 5103213 5103212 https://www.microsoft.com/en-us/download/details.aspx?id=108746 5094139 16792 Yes Security Update 15.02.2562.045 https://support.microsoft.com/help/5103212 16792 5103212 Michael Maturi with Google 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Exchange Server Elevation of Privilege Vulnerability <p>Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.</p> Microsoft Exchange Server Microsoft Yes CVE-2026-55009 Deserialization of Untrusted Data 12039 12293 16792 12502 Elevation of Privilege 12039 Elevation of Privilege 12293 Elevation of Privilege 16792 Elevation of Privilege 12502 Important 12039 Important 12293 Important 16792 Important 12502 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12039 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12293 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16792 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12502 5103215 5094144 12039 Yes Security Update 15.01.2507.071 https://support.microsoft.com/help/5103215 12039 5103215 5103214 5094142 12293 Yes Security Update 15.02.1544.043 https://support.microsoft.com/help/5103214 12293 5103214 5103212 https://www.microsoft.com/en-us/download/details.aspx?id=108746 5094139 16792 Yes Security Update 15.02.2562.045 https://support.microsoft.com/help/5103212 16792 5103212 5103213 5094140 12502 Yes Security Update 15.02.1748.048 https://support.microsoft.com/help/5103213 12502 5103213 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Azure Spring Apps Elevation of Privilege Vulnerability <p>Improper authentication in Azure Spring Apps allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> Azure Spring Apps Microsoft Yes CVE-2026-50338 Improper Authentication 20444 Elevation of Privilege 20444 Important 20444 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N/E:P/RL:O/RC:C 20444 Release Notes https://repo1.maven.org/maven2/com/azure/spring/spring-cloud-azure-starter-active-directory-b2c/7.3.0/ 20444 Maybe Security Update 7.3.0 https://github.com/Azure/azure-sdk-for-java/blob/main/sdk/spring/CHANGELOG.md#730-2026-05-27 20444 Release Notes <a href="https://www.johannes-moeller.dev/">Lukas Johannes Moeller</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Defender Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Microsoft Defender allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>Last version of the Microsoft Malware Protection Engine affected by this vulnerability</td> <td>1.1.26050.11</td> </tr> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>1.1.26060.3008</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> Microsoft Defender Microsoft Yes CVE-2026-55011 Integer Underflow (Wrap or Wraparound) 11902 Remote Code Execution 11902 Critical 11902 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11902 Release Notes 11902 No Security Update 1.1.26060.3008 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide 11902 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Defender Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Defender allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <table> <thead> <tr> <th>References</th> <th>Identification</th> </tr> </thead> <tbody> <tr> <td>Last version of the Microsoft Malware Protection Engine affected by this vulnerability</td> <td>1.1.26050.11</td> </tr> <tr> <td>First version of the Microsoft Malware Protection Engine with this vulnerability addressed</td> <td>1.1.26060.3008</td> </tr> </tbody> </table> <p>See <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/manage-updates-baselines-microsoft-defender-antivirus">Manage Updates Baselines Microsoft Defender Antivirus</a> for more information.</p> <p><strong>Microsoft Defender is disabled in my environment, why are vulnerability scanners showing that I am vulnerable to this issue?</strong></p> <p>Vulnerability scanners are looking for specific binaries and version numbers on devices. Microsoft Defender files are still on disk even when disabled. Systems that have disabled Microsoft Defender are not in an exploitable state.</p> <p><strong>Why is no action required to install this update?</strong></p> <p>In response to a constantly changing threat landscape, Microsoft frequently updates malware definitions and the Microsoft Malware Protection Engine. In order to be effective in helping protect against new and prevalent threats, antimalware software must be kept up to date with these updates in a timely manner.</p> <p>For enterprise deployments as well as end users, the default configuration in Microsoft antimalware software helps ensure that malware definitions and the Microsoft Malware Protection Engine are kept up to date automatically. Product documentation also recommends that products are configured for automatic updating.</p> <p>Best practices recommend that customers regularly verify whether software distribution, such as the automatic deployment of Microsoft Malware Protection Engine updates and malware definitions, is working as expected in their environment.</p> <p><strong>How often are the Microsoft Malware Protection Engine and malware definitions updated?</strong></p> <p>Microsoft typically releases an update for the Microsoft Malware Protection Engine once a month or as needed to protect against new threats. Microsoft also typically updates the malware definitions three times daily and can increase the frequency when needed.</p> <p>Depending on which Microsoft antimalware software is used and how it is configured, the software may search for engine and definition updates every day when connected to the Internet, up to multiple times daily. Customers can also choose to manually check for updates at any time.</p> <p><strong>What is the Microsoft Malware Protection Engine?</strong></p> <p>The Microsoft Malware Protection Engine, mpengine.dll, provides the scanning, detection, and cleaning capabilities for Microsoft antivirus and antispyware software.</p> <p><strong>Windows Defender uses the Microsoft Malware Protection Engine. On which products is Defender installed and active by default?</strong></p> <p>Defender runs on all supported version of Windows.</p> <p><strong>Are there other products that use the Microsoft Malware Protection Engine?</strong></p> <p>Yes, Microsoft System Center Endpoint Protection, Microsoft System Center 2012 R2 Endpoint Protection, Microsoft System Center 2012 Endpoint Protection and Microsoft Security Essentials.</p> <p><strong>Does this update contain any additional security-related changes to functionality?</strong></p> <p>Yes.  In addition to the changes that are listed for this vulnerability, this update includes defense-in-depth updates to help improve security-related features.</p> Microsoft Defender Microsoft Yes CVE-2026-55012 Integer Overflow or Wraparound Heap-based Buffer Overflow 11902 Remote Code Execution 11902 Critical 11902 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11902 Release Notes 11902 No Security Update 1.1.26060.3008 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-updates-baselines-microsoft-defender-antivirus?view=o365-worldwide 11902 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Framework Denial of Service Vulnerability <p>Improper validation of specified type of input in .NET Framework allows an unauthorized attacker to deny service over a network.</p> .NET Framework Microsoft Yes CVE-2026-50524 Improper Validation of Specified Type of Input 21581 20838 12459 20839 12414 12415 12416 12432 12433 12434 16767 Denial of Service 21581 Denial of Service 20838 Denial of Service 12459 Denial of Service 20839 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 12432 Denial of Service 12433 Denial of Service 12434 Denial of Service 16767 Important 21581 Important 20838 Important 12459 Important 20839 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21581 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12459 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with explicit permissions could exploit the vulnerability by logging in to the SQL server and could then elevate their privileges to sysadmin.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-54117 Deserialization of Untrusted Data 20748 21563 Remote Code Execution 20748 Remote Code Execution 21563 Critical 20748 Critical 21563 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21563 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 <a href="https://twitter.com/chudypb">Piotr Bazydło (@chudypb)</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Remote Code Execution Vulnerability <p>Deserialization of untrusted data in SQL Server allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker with explicit permissions could exploit the vulnerability by logging in to the SQL server and could then elevate their privileges to sysadmin.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-54118 Deserialization of Untrusted Data 12053 11821 12147 12145 16785 21372 20748 21563 12048 11478 Remote Code Execution 12053 Remote Code Execution 11821 Remote Code Execution 12147 Remote Code Execution 12145 Remote Code Execution 16785 Remote Code Execution 21372 Remote Code Execution 20748 Remote Code Execution 21563 Remote Code Execution 12048 Remote Code Execution 11478 Critical 12053 Critical 11821 Critical 12147 Critical 12145 Critical 16785 Critical 21372 Critical 20748 Critical 21563 Critical 12048 Critical 11478 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16785 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21563 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 5102339 https://www.microsoft.com/download/details.aspx?familyid=6a7d7b5b-d102-4114-b131-899859ecc3cc 12053 Maybe Security Update 13.0.7095.1 https://support.microsoft.com/help/5102339 12053 5102339 5102339 https://support.microsoft.com/help/5102339 12053 5102336 https://www.microsoft.com/download/details.aspx?familyid=4f9970c0-88ef-4901-a471-851255f05be8 11821 Maybe Security Update 15.0.2180.2 https://support.microsoft.com/help/5102336 11821 5102336 5102336 https://support.microsoft.com/help/5102336 11821 5102334 https://www.microsoft.com/download/details.aspx?familyid=db5e12bd-676a-4324-b736-10053a1d34cf 12147 Maybe Security Update 16.0.1190.2 https://support.microsoft.com/help/5102334 12147 5102334 5102334 https://support.microsoft.com/help/5102334 12147 5102337 https://www.microsoft.com/download/details.aspx?familyid=22c8589d-8b4f-41a4-a7b3-072a8bd4aa3a 12145 Maybe Security Update 14.0.3540.1 https://support.microsoft.com/help/5102337 12145 5102337 5102337 https://support.microsoft.com/help/5102337 12145 5102335 https://www.microsoft.com/download/details.aspx?familyid=0a742248-b0b1-4008-87ac-32af17ce5f2c 16785 Maybe Security Update 15.0.4480.2 https://support.microsoft.com/help/5096773 16785 5102335 5101347 https://www.microsoft.com/download/details.aspx?familyid=2c52560b-6fd0-4ceb-8d60-0c540d910d01 21372 Maybe Security Update 16.0.4262.2 https://support.microsoft.com/help/5101347 21372 5101347 5101347 https://support.microsoft.com/help/5101347 21372 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 5102340 https://www.microsoft.com/download/details.aspx?familyid=a84c7105-2738-4d87-bea7-29846cb384ae 12048 Maybe Security Update 13.0.6500.1 https://support.microsoft.com/help/5102340 12048 5102340 5102340 https://support.microsoft.com/help/5102340 12048 5102338 https://www.microsoft.com/download/details.aspx?familyid=fa1a9c50-337c-4351-88e3-0874a53e57bb 11478 Maybe Security Update 14.0.2120.1 https://support.microsoft.com/help/5102338 11478 5102338 5102338 https://support.microsoft.com/help/5102338 11478 <a href="https://twitter.com/chudypb">Piotr Bazydło (@chudypb)</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>External control of file name or path in SQL Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain sysadmin privileges.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-55002 External Control of File Name or Path 11821 16785 21563 20748 12147 21372 12048 12053 11478 12145 Elevation of Privilege 11821 16785 21563 20748 12147 21372 12048 12053 11478 12145 Important 11821 16785 21563 20748 12147 21372 12048 12053 11478 12145 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16785 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21563 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21372 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 5102336 https://www.microsoft.com/download/details.aspx?familyid=4f9970c0-88ef-4901-a471-851255f05be8 11821 Maybe Security Update 15.0.2180.2 https://support.microsoft.com/help/5102336 11821 5102336 5102336 https://support.microsoft.com/help/5102336 11821 5102335 https://www.microsoft.com/download/details.aspx?familyid=0a742248-b0b1-4008-87ac-32af17ce5f2c 16785 Maybe Security Update 15.0.4480.2 https://support.microsoft.com/help/5096773 16785 5102335 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 5102334 https://www.microsoft.com/download/details.aspx?familyid=db5e12bd-676a-4324-b736-10053a1d34cf 12147 Maybe Security Update 16.0.1190.2 https://support.microsoft.com/help/5102334 12147 5102334 5102334 https://support.microsoft.com/help/5102334 12147 5101347 https://www.microsoft.com/download/details.aspx?familyid=2c52560b-6fd0-4ceb-8d60-0c540d910d01 21372 Maybe Security Update 16.0.4262.2 https://support.microsoft.com/help/5101347 21372 5101347 5101347 https://support.microsoft.com/help/5101347 21372 5102340 https://www.microsoft.com/download/details.aspx?familyid=a84c7105-2738-4d87-bea7-29846cb384ae 12048 Maybe Security Update 13.0.6500.1 https://support.microsoft.com/help/5102340 12048 5102340 5102340 https://support.microsoft.com/help/5102340 12048 5102339 https://www.microsoft.com/download/details.aspx?familyid=6a7d7b5b-d102-4114-b131-899859ecc3cc 12053 Maybe Security Update 13.0.7095.1 https://support.microsoft.com/help/5102339 12053 5102339 5102339 https://support.microsoft.com/help/5102339 12053 5102338 https://www.microsoft.com/download/details.aspx?familyid=fa1a9c50-337c-4351-88e3-0874a53e57bb 11478 Maybe Security Update 14.0.2120.1 https://support.microsoft.com/help/5102338 11478 5102338 5102338 https://support.microsoft.com/help/5102338 11478 5102337 https://www.microsoft.com/download/details.aspx?familyid=22c8589d-8b4f-41a4-a7b3-072a8bd4aa3a 12145 Maybe Security Update 14.0.3540.1 https://support.microsoft.com/help/5102337 12145 5102337 5102337 https://support.microsoft.com/help/5102337 12145 <a href="https://www.linkedin.com/in/fabianoamorim/">Fabiano Amorim</a> with <a href="https://pythian.com/">Pythian</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cryptography API: Next Generation (CNG) Tampering Vulnerability <p>Missing cryptographic step in Windows CryptoAPI allows an authorized attacker to perform tampering locally.</p> Windows CryptoAPI Microsoft Yes CVE-2026-55144 Missing Cryptographic Step 11923 12437 20437 20438 12389 12390 12436 20853 20854 Tampering 11923 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Important 11923 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Samuel Lee with Microsoft Samuel Lee with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Visual Studio Code Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Visual Studio Code Microsoft Yes CVE-2026-50520 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11622 Remote Code Execution 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.128.1 https://code.visualstudio.com/updates/v1_128 11622 Release Notes <a href="https://www.linkedin.com/in/danielberredo/">Daniel Santos</a> with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-54108 External Control of File Name or Path 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 <a href="https://twitter.com/chudypb">Piotr Bazydło (@chudypb)</a> 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-50675 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-50678 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 10836 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11573 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11574 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11762 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11763 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11951 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11952 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11953 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12420 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12421 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12440 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 10739 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 10740 6.6 5.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/dnpushme">f4 &amp; Zhiniang Peng with HUST</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metrics, exploitation results in a small loss of confidentiality (C:L), no integrity impact (I:N), and high availability impact (A:H). What does this mean?</strong></p> <p>This means that an attacker could potentially see a small amount of information they should not have access to, but they cannot change data or system settings. The primary impact is that the affected service could stop working or crash, which may temporarily disrupt normal system operations.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-54988 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Information Disclosure 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 21368 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 10836 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11573 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11574 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11762 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11763 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11951 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11952 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11953 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12420 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12421 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12440 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 10739 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55899 Stack-based Buffer Overflow Improper Input Validation 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-55945 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11655 Information Disclosure 11655 Moderate 11655 Publicly Disclosed:No;Exploited:No 4.2 3.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Gal Weizman (weizmangal@gmail.com / https://x.com/weizmangal) 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55948 Use After Free 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Active Directory Federation Services Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Active Directory Federation Services (AD FS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-56155 Insufficient Granularity of Access Control 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11568 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11569 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11571 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11572 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11923 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12437 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 12436 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10852 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10853 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10816 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10855 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10378 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10379 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10483 7.8 7.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Scott Clark (DART) with <a href="https://www.microsoft.com/">Microsoft</a> Jeremy Kingston (DART) with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Microsoft Office SharePoint allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-56164 Missing Authentication for Critical Function 10950 11585 11961 Elevation of Privilege 10950 Elevation of Privilege 11585 Elevation of Privilege 11961 Moderate 10950 Moderate 11585 Moderate 11961 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:O/RC:C 10950 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:O/RC:C 11585 5.3 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:F/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 <p><strong>The following <a href="https://technet.microsoft.com/library/security/dn848375.aspx#Mitigation">mitigating factors</a> might be helpful in your situation:</strong></p> <p>Enable AMSI: Ensure the Antimalware Scan Interface (AMSI) is actively integrated and scanning SharePoint and IIS worker process memory. Enable AMSI scan feature and set the Request Body Scan mode to Full in order for POST body payloads to be detected.</p> <p>Configure AMSI integration with SharePoint Server - <a href="https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/configure-amsi-integration">https://learn.microsoft.com/en-us/sharepoint/security-for-sharepoint-server/configure-amsi-integration</a></p> Anonymous Genwei Jiang with <a href="https://cloud.google.com/security/mandiant">Google Cloud, FLARE OTF</a> Jayson Frost with <a href="https://cloud.google.com/security/consulting/mandiant-incident-response-services">Mandiant Incident Response</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Admin Center Elevation of Privilege Vulnerability <p>Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges over a network.</p> Windows Admin Center Microsoft Yes CVE-2026-56169 Improper Authentication 11629 Elevation of Privilege 11629 Important 11629 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11629 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.7.4 https://techcommunity.microsoft.com/blog/windows-admin-center-blog/windows-admin-center-version-2606-is-now-generally-available/4530811 11629 Release Notes Howard McGreehan with MSRC V&amp;M 1.0 2026-07-14T07:00:00 <p>Information published.</p> ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-56170 Allocation of Resources Without Limits or Throttling 20838 20839 12414 12415 12416 12432 12433 12434 Denial of Service 20838 Denial of Service 20839 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 12432 Denial of Service 12433 Denial of Service 12434 Important 20838 Important 20839 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Ky0toFu 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability <p>Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>To exploit this vulnerability, an attacker would need to send a specially crafted malicious SSTP packet to a SSTP server. This could result in remote code execution on the server side.</p> Windows Secure Socket Tunneling Protocol (SSTP) Microsoft Yes CVE-2026-50694 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Use after free in Windows Hyper-V allows an unauthorized attacker to elevate privileges locally.</p> Windows Hyper-V Microsoft Yes CVE-2026-54127 Use After Free 11923 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Critical 11923 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.4 6.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 MORSE with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could obtain limited memory-related information, specifically a heap address returned by the affected service.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-56193 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11573 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11574 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11762 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11763 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11951 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11952 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11953 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12420 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12421 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12440 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10753 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10754 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Admin Center Information Disclosure Vulnerability <p>Improper authentication in Windows Admin Center allows an authorized attacker to disclose information over a network.</p> Windows Admin Center Microsoft Yes CVE-2026-56185 Improper Authentication Improper Control of Generation of Code ('Code Injection') 11629 Information Disclosure 11629 Important 11629 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11629 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.6.5.16 https://aka.ms/wac2511 11629 Release Notes Howard McGreehan with MSRC V&amp;M 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft XML Security Feature Bypass Vulnerability <p>Untrusted search path in Microsoft XML allows an unauthorized attacker to bypass a security feature with a physical attack.</p> Microsoft XML Microsoft Yes CVE-2026-57097 Untrusted Search Path 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.4 5.6 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/ken-pyle">Ken Pyle</a> with Independent Academic &amp; Responsible Cybersecurity Research 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Admin Center Elevation of Privilege Vulnerability <p>Improper authentication in Windows Admin Center allows an authorized attacker to elevate privileges locally.</p> Windows Admin Center Microsoft Yes CVE-2026-57107 Improper Authentication 11629 Elevation of Privilege 11629 Important 11629 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11629 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.7.4 https://techcommunity.microsoft.com/blog/windows-admin-center-blog/windows-admin-center-version-2606-is-now-generally-available/4530811 11629 Release Notes sho odagiri with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae inc</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Azure CycleCloud Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated user who has the Cluster Creator role could exploit this vulnerability by using a cluster creation operation in a way that bypasses an authorization check. By doing so, the attacker could overwrite another user’s cluster, including a cluster owned by an administrator, and take ownership of it.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain full control of the affected cluster that was overwritten and taken over. This could allow the attacker to run unauthorized code, remove or alter credentials associated with the cluster, and perform actions with the same level of access available within that cluster.</p> <p><strong>What do I need to do to protect myself?</strong></p> <p>Customers should update to Azure CycleCloud 8.9.1 (Build 8.9.1-3806), which includes the fix for this vulnerability. New installations and upgrades to an existing CycleCloud deployment will receive the updated packages containing the fix.</p> <p>For installation and upgrade guidance, see:</p> <ul> <li><a href="https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/install-manual?view=cyclecloud-8">Install CycleCloud</a></li> <li><a href="https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/upgrade-and-migrate?view=cyclecloud-8">Upgrade an existing CycleCloud installation</a></li> </ul> <p>Updated packages are available through Microsoft's package repositories and the Azure Marketplace image for CycleCloud 8.9.1.</p> Azure CycleCloud Microsoft Yes CVE-2026-57969 Missing Authentication for Critical Function 21547 Elevation of Privilege 21547 Important 21547 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21547 Release Notes https://marketplace.microsoft.com/en-us/product/azurecyclecloud.azure-cyclecloud?tab=Overview 21547 Maybe Security Update - Marketplace Image 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes Release Notes https://packages.microsoft.com/repos/cyclecloud/pool/main/c/cyclecloud8/cyclecloud8_8.9.1-3806_amd64.deb 21547 Maybe Security Update - PMC DEB 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes Release Notes https://packages.microsoft.com/yumrepos/cyclecloud/Packages/c/cyclecloud8-8.9.1-3806.x86_64.rpm 21547 Maybe Security Update - PMC RPM 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBreach.ai</a> XBREACH.AI TEAM with https://xbreach.ai/ XBREACH.AI TEAM with https://xbreach.ai/ 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Denial of Service Vulnerability <p>Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.</p> Active Directory Domain Services Microsoft Yes CVE-2026-57976 NULL Pointer Dereference 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Ravi Kumar 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.</p> Windows RDP Microsoft Yes CVE-2026-57979 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Sanil Singh Tomar with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker can run arbitrary SQL queries as the SMS service (with sysadmin privileges). Since the injection happens during a user permission check, even users with read-only RBAC roles can exploit it. Any local SMS Admins group member on the SMS Provider host can also take advantage of this vulnerability.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57981 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability <p>Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An unauthenticated attacker is able to bypass the expected user access.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57983 Improper Authorization 11655 Security Feature Bypass 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.7 7.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57984 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57985 Improper Input Validation 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.6 6.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57986 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57987 Server-Side Request Forgery (SSRF) 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57988 Relative Path Traversal 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Windows Remote Help Defense Elevation of Privilege Vulnerability <p>Improper access control in Windows Remote Help Defense allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the compromised user.</p> Windows Remote Help Defense Microsoft Yes CVE-2026-55014 Improper Access Control 21548 Elevation of Privilege 21548 Important 21548 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21548 Release Notes https://catalog.update.microsoft.com/ScopedViewInline.aspx?updateid=206fb4e4-b796-4a47-af4f-87e57fd7d35a 21548 Maybe Security Update 5.2.1037.0 https://learn.microsoft.com/en-us/intune/remote-help/?tabs=windows 21548 Release Notes Nick Agathos with <a href="https://www.linkedin.com/in/nick-agathos/">Commonwealth Bank of Australia</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57991 Improper Link Resolution Before File Access ('Link Following') 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-02T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57992 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58276 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58278 Server-Side Request Forgery (SSRF) 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Azure CycleCloud Elevation of Privilege Vulnerability <p>Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What do I need to do to protect myself?</strong></p> <p>Customers should update to Azure CycleCloud 8.9.1 (Build 8.9.1-3806), which includes the fix for this vulnerability. New installations and upgrades to an existing CycleCloud deployment will receive the updated packages containing the fix.</p> <p>For installation and upgrade guidance, see:</p> <ul> <li><a href="https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/install-manual?view=cyclecloud-8">Install CycleCloud</a></li> <li><a href="https://learn.microsoft.com/en-us/azure/cyclecloud/how-to/upgrade-and-migrate?view=cyclecloud-8">Upgrade an existing CycleCloud installation</a></li> </ul> <p>Updated packages are available through Microsoft's package repositories and the Azure Marketplace image for CycleCloud 8.9.1.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>A low-privilege attacker who successfully exploits the vulnerability could potentially elevate their privileges to perform unauthorized modification of another user's cluster.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to no loss of confidentiality (C:N) and availability (A:L), but could lead to major loss of integrity (I:H). What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the ability to modify another user's cluster without authorization. It does not lead to information disclosure or service downtime.</p> Azure CycleCloud Microsoft Yes CVE-2026-58279 Missing Authorization 21547 Elevation of Privilege 21547 Important 21547 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:P/RL:O/RC:C 21547 Release Notes https://packages.microsoft.com/yumrepos/cyclecloud/Packages/c/cyclecloud8-8.9.1-3806.x86_64.rpm 21547 Maybe Security Update - PMC RPM 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes Release Notes https://packages.microsoft.com/repos/cyclecloud/pool/main/c/cyclecloud8/cyclecloud8_8.9.1-3806_amd64.deb 21547 Maybe Security Update - PMC DEB 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes Release Notes https://marketplace.microsoft.com/en-us/product/azurecyclecloud.azure-cyclecloud?tab=Overview 21547 Maybe Security Update - Marketplace Image 8.9.1 https://learn.microsoft.com/en-us/azure/cyclecloud/release-notes/8-9-1?view=cyclecloud-8 21547 Release Notes XBREACH.AI TEAM with https://xbreach.ai/ 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Storage Elevation of Privilege Vulnerability <p>Use after free in Windows Storage allows an authorized attacker to elevate privileges locally.</p> Windows Storage Microsoft Yes CVE-2026-58526 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Bing App for IOS Spoofing Vulnerability <p>Improper restriction of rendered ui layers or frames in Microsoft Bing App for IOS allows an unauthorized attacker to perform spoofing over a network.</p> Microsoft Bing App for IOS Microsoft Yes CVE-2026-58595 Improper Restriction of Rendered UI Layers or Frames 12336 Spoofing 12336 Important 12336 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12336 Release Notes https://apps.apple.com/us/app/microsoft-bing-search/id345323231 12336 Maybe Security Update 33.4.440529002 https://apps.apple.com/us/app/microsoft-bing-search/id345323231 12336 Release Notes <a href="https://www.linkedin.com/in/azza-tegar-naufal-ataullah-4b0488317/">Azza Tegar Naufal Ataullah</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an attacker authenticated as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-50522 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 splitline (@_splitline_) from DEVCORE Research Team working with<a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-56645 Heap-based Buffer Overflow 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes sangnt (@gnas0x0018) with Viettel Cyber Security 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-56646 Exposure of Sensitive Information to an Unauthorized Actor 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://twitter.com/orange_8361">Orange Tsai (@orange_8361)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-13775 Use after free in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13775 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:38 <p>Information published.</p> Chromium: CVE-2026-13776 Type Confusion in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13776 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:40 <p>Information published.</p> Chromium: CVE-2026-13779 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13779 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:42 <p>Information published.</p> Chromium: CVE-2026-13780 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13780 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:43 <p>Information published.</p> Chromium: CVE-2026-13781 Insufficient validation of untrusted input in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13781 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:44 <p>Information published.</p> Chromium: CVE-2026-13782 Use after free in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13782 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:45 <p>Information published.</p> Chromium: CVE-2026-13783 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13783 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:46 <p>Information published.</p> Chromium: CVE-2026-13784 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13784 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-13786 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13786 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:49 <p>Information published.</p> Chromium: CVE-2026-13787 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13787 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:50 <p>Information published.</p> Chromium: CVE-2026-13790 Side-channel information leakage in Scroll <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13790 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-13793 Insufficient policy enforcement in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13793 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:54 <p>Information published.</p> Chromium: CVE-2026-13794 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13794 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:55 <p>Information published.</p> Chromium: CVE-2026-13797 Insufficient validation of untrusted input in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13797 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:58 <p>Information published.</p> Chromium: CVE-2026-13798 Heap buffer overflow in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13798 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:59 <p>Information published.</p> Chromium: CVE-2026-13801 Integer overflow in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13801 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:03 <p>Information published.</p> Chromium: CVE-2026-13802 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13802 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:04 <p>Information published.</p> Chromium: CVE-2026-13803 Type Confusion in Chrome Tabs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13803 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:05 <p>Information published.</p> Chromium: CVE-2026-13804 Use after free in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13804 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:06 <p>Information published.</p> Chromium: CVE-2026-13848 Use after free in Forms <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13848 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:40 <p>Information published.</p> Chromium: CVE-2026-13849 Insufficient validation of untrusted input in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13849 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:41 <p>Information published.</p> Chromium: CVE-2026-13853 Use after free in Journeys <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13853 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:42 <p>Information published.</p> Chromium: CVE-2026-13855 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13855 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:44 <p>Information published.</p> Chromium: CVE-2026-13857 Inappropriate implementation in Geometry <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13857 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:46 <p>Information published.</p> Chromium: CVE-2026-13858 Out of bounds read in FFmpeg <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13858 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:47 <p>Information published.</p> Chromium: CVE-2026-13859 Inappropriate implementation in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13859 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-13854 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13854 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:43 <p>Information published.</p> Chromium: CVE-2026-13860 Incorrect security UI in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13860 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:49 <p>Information published.</p> Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHID <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13864 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:51 <p>Information published.</p> Chromium: CVE-2026-13861 Use after free in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13861 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:50 <p>Information published.</p> Chromium: CVE-2026-13865 Insufficient validation of untrusted input in Enterprise <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13865 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-13867 Inappropriate implementation in Geolocation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13867 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:34 <p>Information published.</p> Chromium: CVE-2026-13869 Use after free in Device <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13869 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:55 <p>Information published.</p> Chromium: CVE-2026-13871 Insufficient data validation in GuestView <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13871 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:56 <p>Information published.</p> Chromium: CVE-2026-13873 Out of bounds memory access in Layout <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13873 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:57 <p>Information published.</p> Chromium: CVE-2026-13874 Inappropriate implementation in DataTransfer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13874 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:59 <p>Information published.</p> Chromium: CVE-2026-13876 Inappropriate implementation in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13876 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Chromium: CVE-2026-13877 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13877 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:02 <p>Information published.</p> Chromium: CVE-2026-13875 Insufficient validation of untrusted input in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13875 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-13879 Use after free in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13879 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:03 <p>Information published.</p> Chromium: CVE-2026-13882 Inappropriate implementation in USB <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13882 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:06 <p>Information published.</p> Chromium: CVE-2026-13881 Insufficient data validation in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13881 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:05 <p>Information published.</p> Chromium: CVE-2026-13883 Type Confusion in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13883 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:35 <p>Information published.</p> Chromium: CVE-2026-13886 Policy bypass in Isolated Web Apps <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13886 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:10 <p>Information published.</p> Chromium: CVE-2026-13888 Use after free in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13888 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:11 <p>Information published.</p> Chromium: CVE-2026-13884 Heap buffer overflow in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13884 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:08 <p>Information published.</p> Chromium: CVE-2026-13890 Out of bounds read in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13890 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:12 <p>Information published.</p> Chromium: CVE-2026-13891 Insufficient validation of untrusted input in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13891 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:13 <p>Information published.</p> Chromium: CVE-2026-13893 Insufficient validation of untrusted input in WebUI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13893 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:14 <p>Information published.</p> Chromium: CVE-2026-13894 Insufficient policy enforcement in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13894 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:16 <p>Information published.</p> Chromium: CVE-2026-13895 Inappropriate implementation in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13895 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:17 <p>Information published.</p> Chromium: CVE-2026-13896 Insufficient policy enforcement in Glic <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13896 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:19 <p>Information published.</p> Chromium: CVE-2026-13897 Insufficient policy enforcement in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13897 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:20 <p>Information published.</p> Chromium: CVE-2026-13898 Use after free in Cast Receiver <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13898 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:21 <p>Information published.</p> Chromium: CVE-2026-13901 Insufficient validation of untrusted input in Serial <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13901 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:25 <p>Information published.</p> Chromium: CVE-2026-13900 Insufficient validation of untrusted input in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13900 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:24 <p>Information published.</p> Chromium: CVE-2026-13899 Use after free in HTML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13899 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:23 <p>Information published.</p> Chromium: CVE-2026-13903 Insufficient policy enforcement in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13903 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:37 <p>Information published.</p> Chromium: CVE-2026-13906 Out of bounds read in Codecs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13906 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:28 <p>Information published.</p> Chromium: CVE-2026-13909 Insufficient policy enforcement in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13909 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:29 <p>Information published.</p> Chromium: CVE-2026-13911 Insufficient data validation in Spellcheck <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13911 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:31 <p>Information published.</p> Chromium: CVE-2026-13921 Insufficient validation of untrusted input in DeviceBoundSessionCredentials <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13921 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:35 <p>Information published.</p> Chromium: CVE-2026-13922 Side-channel information leakage in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13922 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:36 <p>Information published.</p> Chromium: CVE-2026-13920 Insufficient validation of untrusted input in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13920 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:33 <p>Information published.</p> Chromium: CVE-2026-13919 Insufficient data validation in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13919 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:32 <p>Information published.</p> Chromium: CVE-2026-13925 Inappropriate implementation in Downloads <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13925 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:37 <p>Information published.</p> Chromium: CVE-2026-13928 Insufficient validation of untrusted input in Enterprise <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13928 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:38 <p>Information published.</p> Chromium: CVE-2026-13931 Inappropriate implementation in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13931 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:41 <p>Information published.</p> Chromium: CVE-2026-13934 Insufficient validation of untrusted input in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13934 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:44 <p>Information published.</p> Chromium: CVE-2026-13933 Insufficient policy enforcement in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13933 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:42 <p>Information published.</p> Chromium: CVE-2026-13930 Insufficient policy enforcement in Actor <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13930 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:38 <p>Information published.</p> Chromium: CVE-2026-13935 Side-channel information leakage in ComputePressure <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13935 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:45 <p>Information published.</p> Chromium: CVE-2026-13937 Insufficient policy enforcement in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13937 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:46 <p>Information published.</p> Chromium: CVE-2026-13938 Integer overflow in Fonts <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13938 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:47 <p>Information published.</p> Chromium: CVE-2026-13940 Uninitialized Use in Cast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13940 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-13942 Insufficient validation of untrusted input in Video Capture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13942 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:51 <p>Information published.</p> Chromium: CVE-2026-13941 Inappropriate implementation in SiteSettings <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13941 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:50 <p>Information published.</p> Chromium: CVE-2026-13945 Insufficient policy enforcement in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13945 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:52 <p>Information published.</p> Chromium: CVE-2026-13947 Uninitialized Use in XR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13947 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-13948 Insufficient policy enforcement in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13948 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:39 <p>Information published.</p> Chromium: CVE-2026-13950 Uninitialized Use in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13950 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:55 <p>Information published.</p> Chromium: CVE-2026-13951 Policy bypass in USB <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13951 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:57 <p>Information published.</p> Chromium: CVE-2026-13952 Inappropriate implementation in PerformanceAPIs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13952 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:58 <p>Information published.</p> Chromium: CVE-2026-13953 Inappropriate implementation in SplitView <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13953 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:59 <p>Information published.</p> Chromium: CVE-2026-13956 Incorrect security UI in PageInfo <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13956 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Chromium: CVE-2026-13958 Uninitialized Use in Codecs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13958 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:04 <p>Information published.</p> Chromium: CVE-2026-13957 Incorrect security UI in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13957 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:03 <p>Information published.</p> Chromium: CVE-2026-13959 Insufficient validation of untrusted input in Blink <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13959 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:05 <p>Information published.</p> Chromium: CVE-2026-13960 Inappropriate implementation in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13960 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:06 <p>Information published.</p> Chromium: CVE-2026-13962 Insufficient data validation in PDF <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13962 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:07 <p>Information published.</p> Chromium: CVE-2026-13963 Inappropriate implementation in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13963 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:08 <p>Information published.</p> Chromium: CVE-2026-13965 Use after free in Oilpan <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13965 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:10 <p>Information published.</p> Chromium: CVE-2026-13967 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13967 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:12 <p>Information published.</p> Chromium: CVE-2026-13966 Inappropriate implementation in History <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13966 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:11 <p>Information published.</p> Chromium: CVE-2026-13968 Insufficient validation of untrusted input in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13968 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:13 <p>Information published.</p> Chromium: CVE-2026-13970 Uninitialized Use in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13970 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:14 <p>Information published.</p> Chromium: CVE-2026-13972 Inappropriate implementation in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13972 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:17 <p>Information published.</p> Chromium: CVE-2026-13971 Uninitialized Use in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13971 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:16 <p>Information published.</p> Chromium: CVE-2026-13973 Inappropriate implementation in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13973 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:41 <p>Information published.</p> Chromium: CVE-2026-13976 Heap buffer overflow in Storage <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13976 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:19 <p>Information published.</p> Chromium: CVE-2026-13977 Inappropriate implementation in HTMLParser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13977 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:21 <p>Information published.</p> Chromium: CVE-2026-13978 Insufficient policy enforcement in PageInfo <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13978 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:22 <p>Information published.</p> Chromium: CVE-2026-13979 Inappropriate implementation in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13979 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:23 <p>Information published.</p> Chromium: CVE-2026-13982 Incorrect security UI in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13982 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:24 <p>Information published.</p> Chromium: CVE-2026-13984 Incorrect security UI in TabStrip <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13984 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:25 <p>Information published.</p> Chromium: CVE-2026-13985 Inappropriate implementation in MediaCapture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13985 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:26 <p>Information published.</p> Chromium: CVE-2026-13986 Inappropriate implementation in Media UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13986 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:28 <p>Information published.</p> Chromium: CVE-2026-13989 Insufficient policy enforcement in PageInfo <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13989 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:43 <p>Information published.</p> Chromium: CVE-2026-13988 Inappropriate implementation in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13988 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:29 <p>Information published.</p> Chromium: CVE-2026-13993 Incorrect security UI in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13993 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:32 <p>Information published.</p> Chromium: CVE-2026-13990 Insufficient validation of untrusted input in DataTransfer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13990 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:31 <p>Information published.</p> Chromium: CVE-2026-13996 Incorrect security UI in Permissions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13996 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:33 <p>Information published.</p> Chromium: CVE-2026-13999 Inappropriate implementation in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13999 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:35 <p>Information published.</p> Chromium: CVE-2026-14000 Inappropriate implementation in XML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14000 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:36 <p>Information published.</p> Chromium: CVE-2026-14001 Inappropriate implementation in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14001 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:37 <p>Information published.</p> Chromium: CVE-2026-14002 Inappropriate implementation in Geolocation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14002 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:38 <p>Information published.</p> Chromium: CVE-2026-14003 Insufficient policy enforcement in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14003 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:40 <p>Information published.</p> Chromium: CVE-2026-14004 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14004 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:41 <p>Information published.</p> Chromium: CVE-2026-14006 Use after free in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14006 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:44 <p>Information published.</p> Chromium: CVE-2026-14007 Insufficient policy enforcement in PermissionsPolicy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14007 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:43 <p>Information published.</p> Chromium: CVE-2026-14008 Uninitialized Use in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14008 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:44 <p>Information published.</p> Chromium: CVE-2026-14009 Insufficient data validation in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14009 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:46 <p>Information published.</p> Chromium: CVE-2026-14010 Uninitialized Use in Codecs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14010 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:47 <p>Information published.</p> Chromium: CVE-2026-14011 Out of bounds read in SurfaceCapture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14011 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-14012 Side-channel information leakage in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14012 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:49 <p>Information published.</p> Chromium: CVE-2026-14013 Inappropriate implementation in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14013 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:51 <p>Information published.</p> Chromium: CVE-2026-14014 Inappropriate implementation in Paint <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14014 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:52 <p>Information published.</p> Chromium: CVE-2026-14015 Inappropriate implementation in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14015 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-14018 Use after free in Updater <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14018 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:57 <p>Information published.</p> Chromium: CVE-2026-14016 Insufficient policy enforcement in SVG <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14016 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:45 <p>Information published.</p> Chromium: CVE-2026-14017 Inappropriate implementation in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14017 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:55 <p>Information published.</p> Chromium: CVE-2026-14019 Inappropriate implementation in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14019 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:58 <p>Information published.</p> Chromium: CVE-2026-14020 Insufficient validation of untrusted input in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14020 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:59 <p>Information published.</p> Chromium: CVE-2026-14021 Insufficient validation of untrusted input in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14021 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-14022 Insufficient validation of untrusted input in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14022 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Chromium: CVE-2026-14023 Insufficient validation of untrusted input in SanitizerAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14023 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:03 <p>Information published.</p> Chromium: CVE-2026-14025 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14025 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:05 <p>Information published.</p> Chromium: CVE-2026-14024 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14024 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:04 <p>Information published.</p> Chromium: CVE-2026-14027 Use after free in SignIn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14027 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:47 <p>Information published.</p> Chromium: CVE-2026-14031 Incorrect security UI in File Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14031 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:10 <p>Information published.</p> Chromium: CVE-2026-14032 Use after free in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14032 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:11 <p>Information published.</p> Chromium: CVE-2026-14030 Incorrect security UI in SplitView <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14030 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:09 <p>Information published.</p> Chromium: CVE-2026-14034 Inappropriate implementation in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14034 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:14 <p>Information published.</p> Chromium: CVE-2026-14033 Insufficient policy enforcement in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14033 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:12 <p>Information published.</p> Chromium: CVE-2026-14035 Insufficient policy enforcement in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14035 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:15 <p>Information published.</p> Chromium: CVE-2026-14036 Insufficient policy enforcement in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14036 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:16 <p>Information published.</p> Chromium: CVE-2026-14038 Insufficient validation of untrusted input in New Tab Page <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14038 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:18 <p>Information published.</p> Chromium: CVE-2026-14039 Insufficient policy enforcement in GetUserMedia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14039 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-14037 Insufficient policy enforcement in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14037 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:17 <p>Information published.</p> Chromium: CVE-2026-14040 Use after free in BrowserTag <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14040 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:21 <p>Information published.</p> Chromium: CVE-2026-14042 Inappropriate implementation in Isolated Web Apps <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14042 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:23 <p>Information published.</p> Chromium: CVE-2026-14041 Insufficient policy enforcement in Serial <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14041 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:22 <p>Information published.</p> Chromium: CVE-2026-14043 Use after free in GetUserMedia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14043 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:24 <p>Information published.</p> Chromium: CVE-2026-14044 Use after free in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14044 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:25 <p>Information published.</p> Chromium: CVE-2026-14045 Insufficient validation of untrusted input in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14045 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:27 <p>Information published.</p> Chromium: CVE-2026-14046 Inappropriate implementation in CustomTabs <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14046 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:28 <p>Information published.</p> Chromium: CVE-2026-14047 Insufficient policy enforcement in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14047 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:29 <p>Information published.</p> Chromium: CVE-2026-14048 Use after free in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14048 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:30 <p>Information published.</p> Chromium: CVE-2026-14049 Inappropriate implementation in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14049 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:49 <p>Information published.</p> Chromium: CVE-2026-14050 Insufficient policy enforcement in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14050 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:33 <p>Information published.</p> Chromium: CVE-2026-14051 Uninitialized Use in GamepadAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14051 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:34 <p>Information published.</p> Chromium: CVE-2026-14052 Insufficient policy enforcement in FileSystem <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14052 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:35 <p>Information published.</p> Chromium: CVE-2026-14055 Insufficient validation of untrusted input in Device Trust <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14055 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:39 <p>Information published.</p> Chromium: CVE-2026-14053 Insufficient policy enforcement in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14053 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:36 <p>Information published.</p> Chromium: CVE-2026-14056 Insufficient validation of untrusted input in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14056 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:40 <p>Information published.</p> Chromium: CVE-2026-14054 Insufficient policy enforcement in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14054 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:38 <p>Information published.</p> Chromium: CVE-2026-14057 Insufficient policy enforcement in FedCM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14057 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:41 <p>Information published.</p> Chromium: CVE-2026-14058 Policy bypass in Parser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14058 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:42 <p>Information published.</p> Chromium: CVE-2026-14060 Insufficient validation of untrusted input in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14060 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:45 <p>Information published.</p> Chromium: CVE-2026-14062 Inappropriate implementation in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14062 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:47 <p>Information published.</p> Chromium: CVE-2026-14059 Insufficient policy enforcement in Related-Website-Sets <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14059 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:50 <p>Information published.</p> Chromium: CVE-2026-14061 Inappropriate implementation in Dawn <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14061 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:46 <p>Information published.</p> Chromium: CVE-2026-14063 Out of bounds memory access in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14063 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-14064 Use after free in PageInfo <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14064 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:50 <p>Information published.</p> Chromium: CVE-2026-14065 Insufficient validation of untrusted input in PageInfo <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14065 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:51 <p>Information published.</p> Chromium: CVE-2026-14068 Inappropriate implementation in Omnibox <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14068 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:52 <p>Information published.</p> Chromium: CVE-2026-14026 Incorrect security UI in SplitView <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14026 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:06 <p>Information published.</p> Chromium: CVE-2026-14069 Integer overflow in WebNN <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14069 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-14070 Uninitialized Use in WebNN <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14070 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:54 <p>Information published.</p> Chromium: CVE-2026-14072 Incorrect security UI in SplitView <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14072 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:57 <p>Information published.</p> Chromium: CVE-2026-14071 Side-channel information leakage in WebAudio <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14071 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:51 <p>Information published.</p> Chromium: CVE-2026-14073 Insufficient policy enforcement in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14073 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:58 <p>Information published.</p> Chromium: CVE-2026-14076 Policy bypass in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14076 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Chromium: CVE-2026-14077 Incorrect security UI in Select <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14077 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:02 <p>Information published.</p> Chromium: CVE-2026-14078 Policy bypass in WebRTC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14078 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:03 <p>Information published.</p> Chromium: CVE-2026-14079 Policy bypass in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14079 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:04 <p>Information published.</p> Chromium: CVE-2026-14081 Insufficient policy enforcement in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14081 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:07 <p>Information published.</p> Chromium: CVE-2026-14080 Insufficient validation of untrusted input in TabSwitcher <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14080 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:05 <p>Information published.</p> Chromium: CVE-2026-14082 Race in Storage <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14082 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-14074 Side-channel information leakage in WebAuthentication <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14074 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-14083 Insufficient validation of untrusted input in HTML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14083 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:09 <p>Information published.</p> Chromium: CVE-2026-14084 Insufficient validation of untrusted input in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14084 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:10 <p>Information published.</p> Chromium: CVE-2026-14085 Side-channel information leakage in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14085 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:11 <p>Information published.</p> Chromium: CVE-2026-14086 Insufficient policy enforcement in HID <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14086 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:12 <p>Information published.</p> Chromium: CVE-2026-14087 Insufficient validation of untrusted input in WebNN <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14087 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:14 <p>Information published.</p> Chromium: CVE-2026-14089 Insufficient validation of untrusted input in PopupBlocker <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14089 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:16 <p>Information published.</p> Chromium: CVE-2026-14088 Uninitialized Use in Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14088 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:15 <p>Information published.</p> Chromium: CVE-2026-14090 Out of bounds read in CameraCapture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14090 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T00:29:17 <p>Information published.</p> Chromium: CVE-2026-14092 Insufficient policy enforcement in Privacy <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14092 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:54 <p>Information published.</p> Chromium: CVE-2026-14095 Insufficient validation of untrusted input in Browser <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14095 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:23 <p>Information published.</p> Chromium: CVE-2026-14093 Use after free in Cast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14093 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:21 <p>Information published.</p> Chromium: CVE-2026-14094 Use after free in Installer <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14094 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:22 <p>Information published.</p> Chromium: CVE-2026-14097 Inappropriate implementation in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14097 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:24 <p>Information published.</p> Chromium: CVE-2026-14100 Insufficient data validation in NetworkCache <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14100 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:27 <p>Information published.</p> Chromium: CVE-2026-14102 Use after free in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14102 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:28 <p>Information published.</p> Chromium: CVE-2026-14104 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14104 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:30 <p>Information published.</p> Chromium: CVE-2026-14103 Use after free in SSL <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14103 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:29 <p>Information published.</p> Chromium: CVE-2026-14098 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14098 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:26 <p>Information published.</p> Chromium: CVE-2026-14105 Insufficient policy enforcement in Speech <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14105 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:55 <p>Information published.</p> Chromium: CVE-2026-14106 Insufficient validation of untrusted input in Text <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14106 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:33 <p>Information published.</p> Chromium: CVE-2026-14091 Use after free in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14091 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:19 <p>Information published.</p> Chromium: CVE-2026-14107 Use after free in Scheduling <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14107 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:34 <p>Information published.</p> Chromium: CVE-2026-14108 Use after free in PDFium <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14108 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:35 <p>Information published.</p> Chromium: CVE-2026-14109 Insufficient policy enforcement in Mojo <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14109 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:36 <p>Information published.</p> Chromium: CVE-2026-14110 Inappropriate implementation in DarkMode <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14110 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:38 <p>Information published.</p> Chromium: CVE-2026-14111 Use after free in WebProtect <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14111 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:39 <p>Information published.</p> Chromium: CVE-2026-14113 Use after free in Updater <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14113 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:41 <p>Information published.</p> Chromium: CVE-2026-14115 Insufficient validation of untrusted input in Cast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14115 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:43 <p>Information published.</p> Chromium: CVE-2026-14112 Inappropriate implementation in Enterprise <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14112 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:40 <p>Information published.</p> Chromium: CVE-2026-14117 Insufficient validation of untrusted input in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14117 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:46 <p>Information published.</p> Chromium: CVE-2026-14118 Insufficient data validation in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14118 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:47 <p>Information published.</p> Chromium: CVE-2026-14119 Type Confusion in Bluetooth <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14119 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:48 <p>Information published.</p> Chromium: CVE-2026-14120 Inappropriate implementation in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14120 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:49 <p>Information published.</p> Chromium: CVE-2026-14116 Insufficient validation of untrusted input in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14116 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:56 <p>Information published.</p> Chromium: CVE-2026-14121 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14121 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:51 <p>Information published.</p> Chromium: CVE-2026-14124 Inappropriate implementation in CredentialProvider <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14124 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:53 <p>Information published.</p> Chromium: CVE-2026-14125 Uninitialized Use in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14125 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:54 <p>Information published.</p> Chromium: CVE-2026-14122 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14122 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:52 <p>Information published.</p> Chromium: CVE-2026-14127 Inappropriate implementation in Printing <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14127 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:55 <p>Information published.</p> Chromium: CVE-2026-14129 Incorrect security UI in PreviewTab <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14129 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:57 <p>Information published.</p> Chromium: CVE-2026-14130 Incorrect security UI in Omnibox <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14130 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:58 <p>Information published.</p> Chromium: CVE-2026-14133 Race in History Embeddings <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14133 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:02 <p>Information published.</p> Chromium: CVE-2026-14131 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14131 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:59 <p>Information published.</p> Chromium: CVE-2026-14132 Inappropriate implementation in WebXR <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14132 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Chromium: CVE-2026-14134 Inappropriate implementation in Autofill <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14134 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:03 <p>Information published.</p> Chromium: CVE-2026-14139 Inappropriate implementation in TabStrip <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14139 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:07 <p>Information published.</p> Chromium: CVE-2026-14140 Insufficient validation of untrusted input in Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14140 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:08 <p>Information published.</p> Chromium: CVE-2026-14141 Incorrect security UI in Document Picture-in-Picture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14141 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:09 <p>Information published.</p> Chromium: CVE-2026-14142 Inappropriate implementation in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14142 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:59 <p>Information published.</p> Chromium: CVE-2026-14135 Insufficient validation of untrusted input in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14135 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:04 <p>Information published.</p> Chromium: CVE-2026-14138 Inappropriate implementation in WebAppInstalls <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14138 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:05 <p>Information published.</p> Chromium: CVE-2026-14144 Incorrect security UI in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14144 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:13 <p>Information published.</p> Chromium: CVE-2026-14143 Incorrect security UI in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14143 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:11 <p>Information published.</p> Chromium: CVE-2026-14145 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14145 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:14 <p>Information published.</p> Chromium: CVE-2026-14146 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14146 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:15 <p>Information published.</p> Chromium: CVE-2026-14148 Type Confusion in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14148 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:17 <p>Information published.</p> Chromium: CVE-2026-14147 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14147 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:16 <p>Information published.</p> Chromium: CVE-2026-14152 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14152 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:22 <p>Information published.</p> Chromium: CVE-2026-14150 Insufficient validation of untrusted input in Speech <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14150 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:20 <p>Information published.</p> Chromium: CVE-2026-14149 Use after free in Audio <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14149 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:19 <p>Information published.</p> Chromium: CVE-2026-14151 Inappropriate implementation in AI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14151 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:21 <p>Information published.</p> Chromium: CVE-2026-14155 Insufficient policy enforcement in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14155 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:26 <p>Information published.</p> Chromium: CVE-2026-14153 Inappropriate implementation in Glic <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14153 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-14154 Inappropriate implementation in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14154 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:25 <p>Information published.</p> Chromium: CVE-2026-14156 Policy bypass in StorageAccessAPI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14156 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:28 <p>Information published.</p> Chromium: CVE-2026-13961 Insufficient validation of untrusted input in DevTools <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13961 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:40 <p>Information published.</p> Chromium: CVE-2026-13774 Use after free in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13774 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Virtual Hard Disk (VHD) Miniport Driver Elevation of Privilege Vulernability <p>Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Virtual Hard Disk (VHD) Miniport Driver Microsoft Yes CVE-2026-58601 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099540 https://support.microsoft.com/help/5099540 11923 11924 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Daejin Lee sweetchip <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://x.com/mochinishimiya">Nguyễn Đăng Nguyễn (@MochiNishimiya)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel-Mode Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel Mode Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Mode Driver Microsoft Yes CVE-2026-58602 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Print Spooler Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Print Spooler Components allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by interacting with the Windows Print Spooler service in a way that causes it to use memory that has already been freed. By creating and then closing a printer handle without properly invalidating a related notification handle, the attacker can trigger this condition and potentially run code on the affected system.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-58608 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/orange_8361">Orange Tsai (@orange_8361)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Graphics Component Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Graphics Component allows an unauthorized attacker to execute code locally.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-58609 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-58610 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Security Feature Bypass Vulnerability <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>This vulnerability could allow an attacker to bypass an access control mechanism that is designed to restrict a sensitive debugging interface to administrators only.</p> <p>By bypassing this check, a standard authenticated user could gain unauthorized access to functionality that is intended to be limited to highly privileged users, weakening protections that enforce administrative boundaries on debugging capabilities.</p> Windows Kernel Microsoft Yes CVE-2026-58614 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Aman Gupta 1.0 2026-07-14T07:00:00 <p>Information published.</p> Configuration Manager Elevation of Privilege Vulnerability <p>Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending specially crafted requests to the affected service interface, allowing them to upload content without the required permissions. By doing so, an authenticated attacker could leverage this unauthorized access to introduce malicious or unintended content into the system, leading to elevated capabilities beyond their intended level.</p> Microsoft Configuration Manager Microsoft Yes CVE-2026-47301 Improper Access Control 21565 21566 16788 Elevation of Privilege 21565 Elevation of Privilege 21566 Elevation of Privilege 16788 Important 21565 Important 21566 Important 16788 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16788 KB37864969 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2509/36949461 21565 Maybe Security Update 2509 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2509/36949461 21565 KB37864969 KB38232642 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38232642 21566 Maybe Security Update 2603 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38232642 21566 KB38232642 KB38232642 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38232642 16788 Maybe Security Update 2503 https://learn.microsoft.com/en-us/intune/configmgr/hotfix/2603/38232642 16788 KB38232642 <a href="https://www.linkedin.com/in/kr-mick3y">mick3y</a> with Team SaturnX <a href="https://www.linkedin.com/in/omri-baso/">Omri Baso</a> with <a href="https://xmcyber.com/">XM Cyber</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-58618 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/dnpushme">f4 &amp; Zhiniang Peng with HUST</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Admin Center (WAC) Remote Code Execution Vulnerability <p>Improper authorization in Windows Admin Center allows an authorized attacker to execute code locally.</p> Windows Admin Center Microsoft Yes CVE-2026-58631 Improper Authorization 11629 Remote Code Execution 11629 Important 11629 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11629 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.7.4 https://techcommunity.microsoft.com/blog/windows-admin-center-blog/windows-admin-center-version-2606-is-now-generally-available/4530811 11629 Release Notes <a href="https://x.com/int20z">Batuhan Er</a> with <a href="https://hawktrace.com/">HawkTrace</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Narrator Braille Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could execute code in the security context of the “NT AUTHORITY\Network Service” account.</p> Windows Narrator Braille Microsoft Yes CVE-2026-58635 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft PC Manager Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Window PC Manager Microsoft Yes CVE-2026-58636 Improper Link Resolution Before File Access ('Link Following') 12441 Elevation of Privilege 12441 Important 12441 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12441 Release Notes https://apps.microsoft.com/detail/9pm860492szd?hl=en-us&gl=US 12441 Maybe Security Update 3.21.6.0 https://apps.microsoft.com/detail/9pm860492szd?hl=en-us&gl=US 12441 Release Notes .bat Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-58640 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099540 https://support.microsoft.com/help/5099540 11923 11924 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim <a href="https://x.com/immortalp0ny">Sergey immortalp0ny Tarasov</a> with <a href="https://global.ptsecurity.com/">Positive Technologies</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 1.1 2026-07-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Microsoft SharePoint Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>In a network-based attack, an attacker authenticated as at least a Site Owner, could write arbitrary code to inject and execute code remotely on the SharePoint Server.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-58644 Deserialization of Untrusted Data 10950 11585 11961 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:Yes;Latest Software Release:Exploitation Detected 9.8 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 10950 9.8 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11585 9.8 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C 11961 5002880 https://www.microsoft.com/en-us/download/details.aspx?id=108696 5002868 10950 Maybe Security Update 16.0.5556.1005 https://support.microsoft.com/help/5002880 10950 5002880 5002874 https://www.microsoft.com/en-us/download/details.aspx?id=108694 5002870 11585 Maybe Security Update 16.0.10417.20153 https://support.microsoft.com/help/5002874 11585 5002874 5002873 https://www.microsoft.com/en-us/download/details.aspx?id=108692 5002863 11961 Maybe Security Update 16.0.19725.20384 https://support.microsoft.com/help/5002873 11961 5002873 1.0 2026-07-14T07:00:00 <p>Information published.</p> 1.1 2026-07-14T07:00:00 <p>The Patch for this issue was released but the CVE was inadvertently left out of the Patch Tuesday June 2026 release</p> 1.2 2026-07-15T07:00:00 <p>Corrected the Exploitability Index, Exploited flag and CVSS vector which was incorrect at the time of publication on 7/14/2026. This is an informational change only.</p> Microsoft PowerBI Report Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Power BI allows an authorized attacker to perform spoofing over a network.</p> Power BI Microsoft Yes CVE-2026-58647 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11719 Spoofing 11719 Important 11719 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11719 Release Notes https://learn.microsoft.com/en-us/power-bi/report-server/download-powerbi-report-server 11719 Maybe Security Update 15.0.1121.120 https://learn.microsoft.com/en-us/power-bi/report-server/changelog 11719 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Chromium: CVE-2026-13777 Insufficient validation of untrusted input in iOSWeb <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13777 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:58 <p>Information published.</p> Chromium: CVE-2026-13778 Use after free in WebUSB <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13778 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:26 <p>Information published.</p> Chromium: CVE-2026-13788 Use after free in Fullscreen <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13788 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:49 <p>Information published.</p> Chromium: CVE-2026-13791 Insufficient validation of untrusted input in Downloads <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13791 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:29 <p>Information published.</p> Chromium: CVE-2026-13795 Insufficient policy enforcement in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13795 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:59 <p>Information published.</p> Chromium: CVE-2026-13785 Use after free in Bluetooth <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13785 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:28 <p>Information published.</p> Chromium: CVE-2026-13805 Use after free in GFX <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13805 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:31 <p>Information published.</p> Chromium: CVE-2026-13807 Use after free in Import <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13807 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:01 <p>Information published.</p> Chromium: CVE-2026-13812 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13812 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:05 <p>Information published.</p> Chromium: CVE-2026-13809 Side-channel information leakage in Safe Browsing <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13809 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:03 <p>Information published.</p> Chromium: CVE-2026-13808 Insufficient data validation in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13808 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:02 <p>Information published.</p> Chromium: CVE-2026-13816 Insufficient validation of untrusted input in File Input <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13816 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:50 <p>Information published.</p> Chromium: CVE-2026-13813 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13813 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:06 <p>Information published.</p> Chromium: CVE-2026-13825 Uninitialized Use in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13825 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:53 <p>Information published.</p> Chromium: CVE-2026-13819 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13819 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:33 <p>Information published.</p> Chromium: CVE-2026-13822 Inappropriate implementation in Extensions <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13822 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:52 <p>Information published.</p> Chromium: CVE-2026-13826 Inappropriate implementation in Autofill <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13826 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:54 <p>Information published.</p> Chromium: CVE-2026-13827 Use after free in Updater <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13827 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:34 <p>Information published.</p> Chromium: CVE-2026-13833 Uninitialized Use in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13833 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:35 <p>Information published.</p> Chromium: CVE-2026-13843 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13843 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:09 <p>Information published.</p> Chromium: CVE-2026-13842 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13842 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:07 <p>Information published.</p> Chromium: CVE-2026-13846 Use after free in USB <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13846 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:37 <p>Information published.</p> Chromium: CVE-2026-13847 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13847 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:10 <p>Information published.</p> Chromium: CVE-2026-13792 Use after free in Touchbar <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13792 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:30 <p>Information published.</p> Chromium: CVE-2026-13851 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13851 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:56 <p>Information published.</p> Chromium: CVE-2026-13852 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13852 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:57 <p>Information published.</p> Chromium: CVE-2026-13850 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13850 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:11 <p>Information published.</p> Chromium: CVE-2026-13856 Insufficient validation of untrusted input in Speech <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13856 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:58 <p>Information published.</p> CVE-2026-13862 <p>CVE-2026-13862</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13862 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:13 <p>Information published.</p> Chromium: CVE-2026-13863 Insufficient validation of untrusted input in CustomTabs <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13863 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:00 <p>Information published.</p> Chromium: CVE-2026-13866 Insufficient validation of untrusted input in Input <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13866 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:01 <p>Information published.</p> Chromium: CVE-2026-13868 Inappropriate implementation in Network <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13868 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:02 <p>Information published.</p> Chromium: CVE-2026-13870 Use after free in WebView <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13870 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:04 <p>Information published.</p> Chromium: CVE-2026-13878 Use after free in Bluetooth <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13878 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:38 <p>Information published.</p> Chromium: CVE-2026-13872 Insufficient validation of untrusted input in WebAppInstalls <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13872 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:05 <p>Information published.</p> Chromium: CVE-2026-13880 Use after free in USB <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13880 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:39 <p>Information published.</p> Chromium: CVE-2026-13885 Use after free in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13885 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:06 <p>Information published.</p> Chromium: CVE-2026-13887 Insufficient policy enforcement in NFC <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13887 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:08 <p>Information published.</p> Chromium: CVE-2026-13889 Insufficient validation of untrusted input in WebAuthentication <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13889 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:14 <p>Information published.</p> Chromium: CVE-2026-13904 Incorrect security UI in Safe Browsing <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13904 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:18 <p>Information published.</p> Chromium: CVE-2026-13892 Inappropriate implementation in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13892 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:15 <p>Information published.</p> Chromium: CVE-2026-13902 Inappropriate implementation in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13902 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:16 <p>Information published.</p> Chromium: CVE-2026-13905 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13905 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:19 <p>Information published.</p> Chromium: CVE-2026-13914 Inappropriate implementation in Passwords <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13914 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:40 <p>Information published.</p> Chromium: CVE-2026-13907 Inappropriate implementation in iOSWeb <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13907 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:20 <p>Information published.</p> Chromium: CVE-2026-13912 Incorrect security UI in Safe Browsing <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13912 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:23 <p>Information published.</p> Chromium: CVE-2026-13910 Insufficient policy enforcement in WebXR <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13910 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:09 <p>Information published.</p> Chromium: CVE-2026-13913 Insufficient policy enforcement in Autofill <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13913 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:24 <p>Information published.</p> Chromium: CVE-2026-13908 Insufficient validation of untrusted input in Omnibox <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13908 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:22 <p>Information published.</p> Chromium: CVE-2026-13916 Inappropriate implementation in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13916 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:27 <p>Information published.</p> Chromium: CVE-2026-13915 Use after free in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13915 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:26 <p>Information published.</p> Chromium: CVE-2026-13917 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13917 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:28 <p>Information published.</p> Chromium: CVE-2026-13923 Uninitialized Use in GPU <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13923 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:10 <p>Information published.</p> Chromium: CVE-2026-13926 Insufficient validation of untrusted input in Network <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13926 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:13 <p>Information published.</p> Chromium: CVE-2026-13918 Use after free in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13918 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:29 <p>Information published.</p> Chromium: CVE-2026-13924 Insufficient validation of untrusted input in WebView <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13924 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:12 <p>Information published.</p> Chromium: CVE-2026-13929 Insufficient validation of untrusted input in DevTools <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13929 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:15 <p>Information published.</p> Chromium: CVE-2026-13932 Inappropriate implementation in Sharing <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13932 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:17 <p>Information published.</p> Chromium: CVE-2026-13936 Inappropriate implementation in Passwords <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13936 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:18 <p>Information published.</p> Chromium: CVE-2026-13943 Uninitialized Use in CSS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13943 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:21 <p>Information published.</p> Chromium: CVE-2026-13939 Insufficient validation of untrusted input in WebShare <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13939 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:19 <p>Information published.</p> Chromium: CVE-2026-13944 Inappropriate implementation in DataTransfer <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13944 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:42 <p>Information published.</p> Chromium: CVE-2026-13946 Inappropriate implementation in ScriptInjections <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13946 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:31 <p>Information published.</p> Chromium: CVE-2026-13949 Insufficient policy enforcement in Payments <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13949 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:22 <p>Information published.</p> Chromium: CVE-2026-13955 Insufficient validation of untrusted input in CustomTabs <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13955 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:23 <p>Information published.</p> Chromium: CVE-2026-13927 Insufficient validation of untrusted input in UI <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13927 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:14 <p>Information published.</p> Chromium: CVE-2026-13964 Insufficient policy enforcement in WebView <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13964 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:24 <p>Information published.</p> Chromium: CVE-2026-13969 Uninitialized Use in UI <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13969 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:26 <p>Information published.</p> Chromium: CVE-2026-13975 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13975 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:44 <p>Information published.</p> Chromium: CVE-2026-13974 Integer overflow in Safe Browsing <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13974 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:43 <p>Information published.</p> Chromium: CVE-2026-13981 Inappropriate implementation in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13981 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:33 <p>Information published.</p> Chromium: CVE-2026-13980 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13980 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:32 <p>Information published.</p> Chromium: CVE-2026-13987 Incorrect security UI in Mobile <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13987 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:27 <p>Information published.</p> Chromium: CVE-2026-13991 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13991 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:36 <p>Information published.</p> Chromium: CVE-2026-13992 Inappropriate implementation in UI <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13992 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:46 <p>Information published.</p> Chromium: CVE-2026-13994 Inappropriate implementation in Credential Management <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13994 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:28 <p>Information published.</p> Chromium: CVE-2026-13995 Insufficient validation of untrusted input in Autofill <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13995 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:29 <p>Information published.</p> Chromium: CVE-2026-13983 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13983 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:34 <p>Information published.</p> Chromium: CVE-2026-13997 Incorrect security UI in Extensions <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13997 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:31 <p>Information published.</p> Chromium: CVE-2026-13998 Incorrect security UI in File Input <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13998 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:47 <p>Information published.</p> Chromium: CVE-2026-14005 Use after free in Omnibox <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14005 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:32 <p>Information published.</p> Chromium: CVE-2026-14028 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14028 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:37 <p>Information published.</p> Chromium: CVE-2026-14066 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14066 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:38 <p>Information published.</p> Chromium: CVE-2026-14067 Use after free in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14067 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:40 <p>Information published.</p> Chromium: CVE-2026-14075 Policy bypass in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14075 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:41 <p>Information published.</p> Chromium: CVE-2026-14096 Object lifecycle issue in Input <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14096 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:33 <p>Information published.</p> Chromium: CVE-2026-14099 Use after free in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14099 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:43 <p>Information published.</p> Chromium: CVE-2026-14101 Insufficient policy enforcement in Sandbox <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14101 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:49 <p>Information published.</p> Chromium: CVE-2026-14114 Inappropriate implementation in WebAppInstalls <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14114 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:35 <p>Information published.</p> Chromium: CVE-2026-14123 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14123 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:44 <p>Information published.</p> Chromium: CVE-2026-14126 Incorrect security UI in UI <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14126 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:36 <p>Information published.</p> Chromium: CVE-2026-14128 Insufficient data validation in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14128 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:45 <p>Information published.</p> Chromium: CVE-2026-14136 Incorrect security UI in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14136 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:46 <p>Information published.</p> Chromium: CVE-2026-14385 Heap buffer overflow in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14385 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:50 <p>Information published.</p> Chromium: CVE-2026-14137 Insufficient validation of untrusted input in Chrome for iOS <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14137 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:40:48 <p>Information published.</p> Chromium: CVE-2026-14382 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14382 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:37 <p>Information published.</p> Chromium: CVE-2026-14386 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14386 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:52 <p>Information published.</p> Chromium: CVE-2026-14388 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14388 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:22 <p>Information published.</p> Chromium: CVE-2026-14390 Use after free in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14390 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:31 <p>Information published.</p> Chromium: CVE-2026-14392 Out of bounds write in Tint <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14392 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:36 <p>Information published.</p> Chromium: CVE-2026-14393 Use after free in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14393 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:37 <p>Information published.</p> Chromium: CVE-2026-14391 Integer overflow in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14391 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:35 <p>Information published.</p> Chromium: CVE-2026-14395 Out of bounds write in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14395 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:40 <p>Information published.</p> Chromium: CVE-2026-14396 Out of bounds read in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14396 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:53 <p>Information published.</p> Chromium: CVE-2026-14394 Use after free in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14394 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:39 <p>Information published.</p> Chromium: CVE-2026-14398 Use after free in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14398 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:41 <p>Information published.</p> Chromium: CVE-2026-14397 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14397 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:54 <p>Information published.</p> Chromium: CVE-2026-14399 Uninitialized Use in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14399 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:43 <p>Information published.</p> Chromium: CVE-2026-14401 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14401 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:23 <p>Information published.</p> Chromium: CVE-2026-14400 Out of bounds write in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14400 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:44 <p>Information published.</p> Chromium: CVE-2026-14403 Use after free in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14403 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:47 <p>Information published.</p> Chromium: CVE-2026-14406 Out of bounds read in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14406 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:51 <p>Information published.</p> Chromium: CVE-2026-14404 Inappropriate implementation in PDFium <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14404 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:48 <p>Information published.</p> Chromium: CVE-2026-14402 Uninitialized Use in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14402 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:45 <p>Information published.</p> Chromium: CVE-2026-14405 Uninitialized Use in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14405 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:50 <p>Information published.</p> Chromium: CVE-2026-14407 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14407 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:53 <p>Information published.</p> Chromium: CVE-2026-14409 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14409 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:55 <p>Information published.</p> Chromium: CVE-2026-14408 Uninitialized Use in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14408 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:54 <p>Information published.</p> Chromium: CVE-2026-14411 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14411 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:57 <p>Information published.</p> Chromium: CVE-2026-14410 Inappropriate implementation in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14410 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:56 <p>Information published.</p> Chromium: CVE-2026-14412 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14412 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:37:59 <p>Information published.</p> Chromium: CVE-2026-14413 Uninitialized Use in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14413 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:00 <p>Information published.</p> Chromium: CVE-2026-14414 Insufficient validation of untrusted input in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14414 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:02 <p>Information published.</p> Chromium: CVE-2026-14415 Inappropriate implementation in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14415 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:03 <p>Information published.</p> Chromium: CVE-2026-14416 Out of bounds read in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14416 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:04 <p>Information published.</p> Chromium: CVE-2026-14417 Use after free in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14417 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:05 <p>Information published.</p> Chromium: CVE-2026-14420 Out of bounds read and write in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14420 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:09 <p>Information published.</p> Chromium: CVE-2026-14418 Uninitialized Use in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14418 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:07 <p>Information published.</p> Chromium: CVE-2026-14419 Use after free in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14419 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:08 <p>Information published.</p> Chromium: CVE-2026-14422 Out of bounds read and write in Tint <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14422 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:55 <p>Information published.</p> Chromium: CVE-2026-14423 Type Confusion in Tint <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14423 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:10 <p>Information published.</p> Chromium: CVE-2026-14421 Uninitialized Use in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14421 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:25 <p>Information published.</p> Chromium: CVE-2026-14424 Use after free in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14424 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:39:57 <p>Information published.</p> Chromium: CVE-2026-14425 Use after free in ANGLE <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14425 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:12 <p>Information published.</p> Chromium: CVE-2026-14426 Use after free in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14426 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:13 <p>Information published.</p> Chromium: CVE-2026-14427 Heap buffer overflow in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14427 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:14 <p>Information published.</p> Chromium: CVE-2026-14428 Insufficient validation of untrusted input in Dawn <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14428 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:41:38 <p>Information published.</p> Chromium: CVE-2026-14429 Insufficient validation of untrusted input in Skia <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14429 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:16 <p>Information published.</p> Chromium: CVE-2026-14430 Integer overflow in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14430 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:17 <p>Information published.</p> Chromium: CVE-2026-14432 Use after free in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14432 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:19 <p>Information published.</p> Chromium: CVE-2026-14431 Type Confusion in V8 <p>This CVE was assigned by Chrome.  Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-14431 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-11T15:38:18 <p>Information published.</p> Azure Active Directory Denial of Service Vulnerability <p>Deserialization of untrusted data in Azure Active Directory allows an unauthorized attacker to deny service over a network.</p> Azure Active Directory Microsoft Yes CVE-2026-50652 Deserialization of Untrusted Data 11963 2472-20854 2472-20853 12078-20853 12078-20854 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 2472-10378 2472-10379 2472-10483 2472-10543 Denial of Service 11963 Denial of Service 2472-20854 Denial of Service 2472-20853 Denial of Service 12078-20853 Denial of Service 12078-20854 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 2472-10378 Denial of Service 2472-10379 Denial of Service 2472-10483 Denial of Service 2472-10543 Important 11963 Important 2472-20854 Important 2472-20853 Important 12078-20853 Important 12078-20854 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11963 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 Release Notes https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/5.7.1 11963 Maybe Security Update 5.7.1 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md 11963 Release Notes Release Notes https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/7.7.3 11963 Maybe Security Update 7.7.3 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md 11963 Release Notes Release Notes https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/8.19.2 11963 Maybe Security Update 8.19.2 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md 11963 Release Notes 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 2472-20854 2472-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 Vandit Aruldas with Microsoft 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Azure Active Directory Denial of Service Vulnerability <p>Loop with unreachable exit condition ('infinite loop') in Azure Active Directory allows an unauthorized attacker to deny service over a network.</p> Azure Active Directory Microsoft Yes CVE-2026-50653 Loop with Unreachable Exit Condition ('Infinite Loop') Uncontrolled Resource Consumption 11963 2472-20854 2472-20853 12078-20854 12078-20853 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 2472-10378 2472-10379 2472-10483 2472-10543 Denial of Service 11963 Denial of Service 2472-20854 Denial of Service 2472-20853 Denial of Service 12078-20854 Denial of Service 12078-20853 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 2472-10378 Denial of Service 2472-10379 Denial of Service 2472-10483 Denial of Service 2472-10543 Important 11963 Important 2472-20854 Important 2472-20853 Important 12078-20854 Important 12078-20853 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11963 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 Release Notes https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/8.19.2 11963 Maybe Security Update 8.19.2 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md 11963 Release Notes Release Notes https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/7.7.3 11963 Maybe Security Update 7.7.3 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md 11963 Release Notes Release Notes https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/releases/tag/5.7.1 11963 Maybe Security Update 5.7.1 https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/blob/dev/CHANGELOG.md 11963 Release Notes 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 2472-20854 2472-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20854 12078-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20854 12078-20853 5101002 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 Sridhar Periyasamy 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Admin Center Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker would have to convince a user to visit a malicious website, typically via an enticement in email or instant message, or by getting them to open an email attachment.</p> <p><strong>What is the attack vector for this vulnerability?</strong></p> <p>The attack vector is address bar spoofing. A malicious website could spoof the contents of a URL bar via a specially crafted HTML page's long URL and then use it for a phishing attack.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This vulnerability requires that a user with an affected version of Windows access a malicious server. An attacker would have to host a specially crafted server share or website. An attacker would have no way to force users to visit this specially crafted server share or website, but would have to convince them to visit the server share or website, typically by way of an enticement in an email or chat message.</p> Windows Admin Center Microsoft Yes CVE-2026-58643 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11629 Spoofing 11629 Important 11629 Publicly Disclosed:No;Exploited:No Release Notes https://aka.ms/DownloadWAC 11629 No Security Update 2511 https://techcommunity.microsoft.com/blog/Windows-Admin-Center-Blog/windows-admin-center-version-2511-is-now-generally-available/4477048 11629 Release Notes sho odagiri with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae inc</a> <a href="https://ma.linkedin.com/in/brahim-chebli, https://x.com/x4sh3s">Brahim Chebli</a> with <a href="https://www.deloitte.com/fr/fr/services/consulting-risk/services/offensive-security-center.html">Deloitte France’s Offensive Security Center</a> <a href="https://ma.linkedin.com/in/brahim-chebli, https://x.com/x4sh3s">Brahim Chebli</a> with <a href="https://www.deloitte.com/fr/fr/services/consulting-risk/services/offensive-security-center.html">Deloitte France’s Offensive Security Center</a> 1.0 2026-07-16T07:00:00 <p>Information published.</p> Windows Backup Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> Windows Backup Engine Microsoft Yes CVE-2026-58598 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11929 11930 11931 12097 12098 12099 20437 20438 12389 12390 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-16T07:00:00 <p>Information published.</p> Chromium: CVE-2026-15904 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15904 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:43 <p>Information published.</p> Chromium: CVE-2026-15903 Out of bounds read and write in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15903 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:41 <p>Information published.</p> Chromium: CVE-2026-15899 Use after free in CameraCapture <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15899 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:35 <p>Information published.</p> Chromium: CVE-2026-15778 Insufficient validation of untrusted input in Navigation <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15778 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T07:00:17 <p>Information published.</p> Chromium: CVE-2026-15776 Type Confusion in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15776 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:14 <p>Information published.</p> Chromium: CVE-2026-15775 Insufficient policy enforcement in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15775 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:13 <p>Information published.</p> Chromium: CVE-2026-15774 Use after free in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15774 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:12 <p>Information published.</p> Chromium: CVE-2026-15773 Use after free in Core <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15773 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:11 <p>Information published.</p> Chromium: CVE-2026-15770 Uninitialized Use in V8 <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15770 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:08 <p>Information published.</p> Chromium: CVE-2026-15900 Use after free in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15900 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:38 <p>Information published.</p> Chromium: CVE-2026-15901 Use after free in Network <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15901 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:39 <p>Information published.</p> Microsoft Edge (Chromium-based) Tampering Vulnerability <p>Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57980 Authentication Bypass Using an Alternate Path or Channel 11655 Tampering 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-16T07:00:00 <p>Information published.</p> Chromium: CVE-2026-15765 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15765 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:01 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is an address from an object operating at a High Integrity Level in a contained (&quot;sandboxed&quot;) execution environment.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows File Explorer Microsoft Yes CVE-2026-33842 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 David Zhu with Microsoft Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Audio Service Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Audio Service allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is memory addresses belonging to the &quot;EventLog&quot; Windows service</p> Windows Audio Service Microsoft Yes CVE-2026-34328 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is an address from an object operating at a High Integrity Level in a contained (&quot;sandboxed&quot;) execution environment.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows File Explorer Microsoft Yes CVE-2026-40422 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is an address from an object operating at a High Integrity Level in a contained (&quot;sandboxed&quot;) execution environment.</p> <p>Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows File Explorer Microsoft Yes CVE-2026-41087 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows PowerShell Remote Code Execution Vulnerability <p>Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires an authenticated client to click a link so that an unauthenticated attacker can initiate remote code execution.</p> Windows PowerShell Microsoft Yes CVE-2026-40400 Relative Path Traversal 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Quan Le from Unit 515 - OPSWAT Saif Shaker <a href="https://zpbrent.github.io/">Peng Zhou (zpbrent)</a> <a href="https://x.com/theteatoast">Anindya Roy</a> Rayhan Destian <a href="https://rayhan.ch/">Rayhan Destian</a> <a href="https://www.linkedin.com/in/charlievogt">Charlie Vogt</a> Michael Monwuba with Microsoft MinhNV5 with <a href="https://mbbank.com.vn/">MBBank</a> PuH4ck3rX <a href="https://puh4ck3rx.github.io/">PuH4ck3rX</a> with W&amp;M <a href="https://www.ymsora.com/">YMsora</a> <a href="https://www.instagram.com/jishnu.sudhakaran">Jishnu Sudhakaran</a> Ky0toFu Povcfe <a href="https://www.linkedin.com/in/danielr1123/">Daniel R</a> Anonymous <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> <a href="https://www.linkedin.com/in/charlievogt">Charlie Vogt</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Event Logging Service Information Disclosure Vulnerability <p>Protection mechanism failure in Windows Event Logging Service allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Event Logging Service Microsoft Yes CVE-2026-34348 Protection Mechanism Failure 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12242 Information Disclosure 12243 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5089548 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5089548 5083768 20854 Yes Security Update 10.0.28000.2113 https://support.microsoft.com/help/5089548 20854 5089548 <a href="https://x.com/mgrafnetter">Michael Grafnetter</a> with <a href="https://specterops.io/">SpecterOps</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Secure Channel Denial of Service Vulnerability <p>Missing release of memory after effective lifetime in Windows Cryptographic Services allows an unauthorized attacker to deny service over a network.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-44806 Missing Release of Memory after Effective Lifetime 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10855 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10378 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10379 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10483 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability <p>Memory allocation with excessive size value in Windows Local Security Authority Subsystem Service (LSASS) allows an unauthorized attacker to deny service over a network.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-40378 Memory Allocation with Excessive Size Value 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12242 Denial of Service 12243 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5095051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051 20854 Yes Security Update 10.0.28000.2269 https://support.microsoft.com/help/5095051 20854 5095051 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 WARP &amp; MORSE teams at Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Security Feature Bypass Vulnerability <p>Improper verification of cryptographic signature in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>The authentication feature could be bypassed as this vulnerability allows impersonation.</p> .NET Microsoft Yes CVE-2026-47304 Improper Verification of Cryptographic Signature Insufficient Verification of Data Authenticity 20838 20839 12414 12415 12416 12432 12433 12434 21244 11600 16767 12459 11935 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-12437 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12079-12436 2472-10378 2472-10379 2472-10483 2472-10543 12078-20854 2472-20853 21581 2472-20854 12078-20853 Security Feature Bypass 20838 Security Feature Bypass 20839 Security Feature Bypass 12414 Security Feature Bypass 12415 Security Feature Bypass 12416 Security Feature Bypass 12432 Security Feature Bypass 12433 Security Feature Bypass 12434 Security Feature Bypass 21244 Security Feature Bypass 11600 Security Feature Bypass 16767 Security Feature Bypass 12459 Security Feature Bypass 11935 Security Feature Bypass 11650-10852 Security Feature Bypass 11650-10853 Security Feature Bypass 11650-10816 Security Feature Bypass 11650-10855 Security Feature Bypass 11650-10378 Security Feature Bypass 11650-10379 Security Feature Bypass 11650-10483 Security Feature Bypass 11650-10543 Security Feature Bypass 11676-11568 Security Feature Bypass 11676-11569 Security Feature Bypass 11676-11571 Security Feature Bypass 11676-11572 Security Feature Bypass 11676-11923 Security Feature Bypass 11676-11924 Security Feature Bypass 11676-11929 Security Feature Bypass 11676-11930 Security Feature Bypass 11676-11931 Security Feature Bypass 11676-12097 Security Feature Bypass 11676-12098 Security Feature Bypass 11676-12099 Security Feature Bypass 11677-11568 Security Feature Bypass 11677-11569 Security Feature Bypass 11677-11571 Security Feature Bypass 11677-11572 Security Feature Bypass 11677-10852 Security Feature Bypass 11677-10853 Security Feature Bypass 11677-10816 Security Feature Bypass 11677-10855 Security Feature Bypass 11863-10378 Security Feature Bypass 11863-10379 Security Feature Bypass 11863-10483 Security Feature Bypass 11863-10543 Security Feature Bypass 12079-11923 Security Feature Bypass 12079-11924 Security Feature Bypass 12079-11929 Security Feature Bypass 12079-11930 Security Feature Bypass 12079-11931 Security Feature Bypass 12079-12097 Security Feature Bypass 12079-12098 Security Feature Bypass 12079-12099 Security Feature Bypass 12079-12437 Security Feature Bypass 12079-20437 Security Feature Bypass 12079-20438 Security Feature Bypass 12079-12242 Security Feature Bypass 12079-12243 Security Feature Bypass 12079-12389 Security Feature Bypass 12079-12390 Security Feature Bypass 12079-12436 Security Feature Bypass 2472-10378 Security Feature Bypass 2472-10379 Security Feature Bypass 2472-10483 Security Feature Bypass 2472-10543 Security Feature Bypass 12078-20854 Security Feature Bypass 2472-20853 Security Feature Bypass 21581 Security Feature Bypass 2472-20854 Security Feature Bypass 12078-20853 Important 20838 Important 20839 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Important 21244 Important 11600 Important 16767 Important 12459 Important 11935 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-12437 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12079-12436 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Important 12078-20854 Important 2472-20853 Important 21581 Important 2472-20854 Important 12078-20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21244 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11600 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12459 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11935 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5101003 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101003 12079-12437 12079-12436 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5101003 12079-12437 12079-12436 5101003 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20854 12078-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20854 12078-20853 5101002 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 2472-20853 2472-20854 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 2472-20853 2472-20854 5101014 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Levi Broderick 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Push Notifications Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>This vulnerability could lead to a contained execution environment escape. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer Isolation</a> for more information.</p> Windows Push Notifications Microsoft Yes CVE-2026-44800 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5095051 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5095051 20854 Yes Security Update 10.0.28000.2269 https://support.microsoft.com/help/5095051 20854 5095051 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Azure Monitor Agent Metrics Extension Elevation of Privilege Vulnerability <p>Improper certificate validation in Azure Monitor Agent allows an unauthorized attacker to elevate privileges over an adjacent network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> Azure Monitor Agent Microsoft Yes CVE-2026-47632 Improper Certificate Validation 21301 Elevation of Privilege 21301 Important 21301 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21301 Release Notes https://gbl.his.arc.azure.com/azcmagent/1.65/AzureConnectedMachineAgent.msi 21301 No Security Update - Windows 1.65 https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-release-notes 21301 Release Notes Release Notes https://learn.microsoft.com/en-us/azure/azure-arc/servers/manage-agent#install-a-specific-version-of-the-agent 21301 Maybe Security Update - Linux 1.65 https://learn.microsoft.com/en-us/azure/azure-arc/servers/agent-release-notes 21301 Release Notes Gal Azaria with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> DHCP Server Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could leverage a specially crafted RPC call to the DHCP service to exploit this vulnerability.</p> Windows DHCP Server Microsoft Yes CVE-2026-48564 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5094042 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094042 5087470 10378 10379 Yes Monthly Rollup 6.2.9200.26132 https://support.microsoft.com/help/5094042 10378 10379 5094042 5094041 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5094041 5087471 10483 10543 Yes Monthly Rollup 6.3.9600.23228 https://support.microsoft.com/help/5094041 10483 10543 5094041 Howard McGreehan with MSRC V&amp;M WARP and ACS teams at Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Surface Broker SDMA Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Microsoft Surface allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>What actions do customers need to perform to be protected against this vulnerability?</strong></p> <p>Surface devices get updates through Windows Update. See <a href="https://support.microsoft.com/en-us/surface/surface-update-history-6036fff5-edec-c8ec-9796-a5633aac9488">Surface update history</a> for more information.</p> <p>If you wish to install the updates manually, you can do the following:</p> <ol> <li>In the Surface app, expand <strong>Help &amp; support</strong> to check the update status.</li> <li>If there are updates available, select the <strong>Check for updates</strong> button to open Windows Update and install the available updates.</li> </ol> Microsoft Surface Microsoft Yes CVE-2026-48581 Insufficient Granularity of Access Control 12485 11739 12492 12495 12490 12482 12487 12484 12489 12488 12494 12483 12491 Elevation of Privilege 12485 Elevation of Privilege 11739 Elevation of Privilege 12492 Elevation of Privilege 12495 Elevation of Privilege 12490 Elevation of Privilege 12482 Elevation of Privilege 12487 Elevation of Privilege 12484 Elevation of Privilege 12489 Elevation of Privilege 12488 Elevation of Privilege 12494 Elevation of Privilege 12483 Elevation of Privilege 12491 Important 12485 Important 11739 Important 12492 Important 12495 Important 12490 Important 12482 Important 12487 Important 12484 Important 12489 Important 12488 Important 12494 Important 12483 Important 12491 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12485 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12492 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12495 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12490 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12482 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12487 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12484 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12489 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12488 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12494 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12491 <a href="https://x.com/yeahbutnahbut">JC</a> with <a href="https://splinters.io/">Splinters.io</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> OData for ASP.NET and ASP.NET Core Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in ASP.NET Core allows an unauthorized attacker to deny service over a network.</p> ASP.NET Core Microsoft Yes CVE-2026-45646 Allocation of Resources Without Limits or Throttling 21349 21348 Denial of Service 21349 Denial of Service 21348 Important 21349 Important 21348 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21349 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21348 Release Notes 21349 Maybe Security Update 7.8.0 https://www.nuget.org/packages/Microsoft.AspNet.OData 21349 Release Notes Release Notes 21348 Maybe Security Update 9.5.0[SX1] https://www.nuget.org/packages/Microsoft.AspNetCore.OData/ 21348 Release Notes Anonymous Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Active Directory Domain Services allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>A domain‑authenticated attacker with access to the NSPI RPC interface can provide crafted inputs that trigger an out‑of‑bounds write in the directory service process, leading to memory corruption/remote code execution.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploits this vulnerability could achieve remote code execution without user interaction.</p> Active Directory Domain Services Microsoft Yes CVE-2026-49178 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability <p>Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file content.</p> Universal Plug and Play (upnp.dll) Microsoft Yes CVE-2026-49180 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Siva Jyoshna Poreddy 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DHCP Client Elevation of Privilege Vulnerability <p>Integer underflow (wrap or wraparound) in Windows DHCP Client allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Client Microsoft Yes CVE-2026-49181 Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Jay Ladhad with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-49184 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 pwn2addr <a href="https://x.com/x0rb1ts">0rb1t</a> with <a href="http://www.0rb1t.top/">None</a> <a href="https://github.com/qanux">Qanux</a> with None <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim Anonymous Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract yhw &amp; txz Anonymous <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> with <a href="https://stealien.com/main">Stealien</a> R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Clipboard Server Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Clipboard Server Microsoft Yes CVE-2026-49183 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> <a href="https://linkedin.com/in/jongseongkim">Younggi Park (grill66), SEC-agent team</a> Pwnforr777 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Secure Boot Security Feature Bypass Vulnerability <p>Improperly implemented security check for standard in Windows Secure Boot allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Secure Boot.</p> Windows Secure Boot Microsoft Yes CVE-2026-49783 Improperly Implemented Security Check for Standard 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> HTTP.sys Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in Windows HTTP.sys allows an unauthorized attacker to deny service over a network.</p> Windows HTTP.sys Microsoft Yes CVE-2026-49787 Allocation of Resources Without Limits or Throttling 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Miha Zupan with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> HTTP/2 Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in HTTP/2 allows an unauthorized attacker to deny service over a network.</p> HTTP/2 Microsoft Yes CVE-2026-49788 Allocation of Resources Without Limits or Throttling 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Miha Zupan with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Windows NTFS Microsoft Yes CVE-2026-49789 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian (HKPolyu) &amp; wgg &amp; @2st__ with Diffract R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-49790 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; wgg &amp; PB18 &amp; @2st__ with Diffract <a href="https://x.com/hank0438">Hank Chen</a> with InnoEdge Labs 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-49791 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10378 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10379 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/crispr_x">BochengXiang(@Crispr)</a> with FDU 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-49792 Numeric Truncation Error 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://x.com/1n1t1al">Dewang Ahluwalia</a> Jonghoi Kim <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-49793 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://x.com/1n1t1al">Dewang Ahluwalia</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Audio Class Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could obtain limited memory-related information, specifically a heap address returned by the affected service.</p> Windows USB Audio Class driver (usbaudio.sys) Microsoft Yes CVE-2026-49794 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 4.6 4.0 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows GDI+ Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Windows GDI+ Microsoft Yes CVE-2026-49796 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-49795 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-49797 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian &amp; wgg &amp; @2st__ with Diffract 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could run a specially crafted program on a local system that triggers the vulnerable function while a menu is being processed, causing the system to use memory that has already been freed. This can result in memory corruption, which an attacker may use to run malicious code.</p> Windows Kernel Microsoft Yes CVE-2026-49798 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.3 8.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> Younggi Park (grill66), SEC-agent team <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Storage Spaces Direct Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows Storage Spaces Direct allows an unauthorized attacker to execute code with a physical attack.</p> Windows Storage Spaces Direct Microsoft Yes CVE-2026-50299 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.</p> Windows Web Proxy Auto-Discovery Protocol (WPAD) Microsoft Yes CVE-2026-49800 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 nerty with <a href="https://theori.io/">Theori</a> <a href="https://www.z1r0.top/">z1r0</a> Anonymous <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://x.com/_twinklestar03">TwinkleStar03</a> with <a href="https://devco.re/">DEVCORE Internship Program</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee (m0nd2y)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> <a href="https://www.linkedin.com/in/dongjun-lee-a1505b1b1/">Dongjun Lee</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> nerty with <a href="https://theori.io/">Theori</a> nerty with <a href="https://theori.io/">Theori</a> Anonymous k0shl 021w with Vulnerability Research Institute 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability <p>Uncontrolled resource consumption in Windows Local Security Authority Subsystem Service (LSASS) allows an authorized attacker to deny service over a network.</p> Windows Local Security Authority Subsystem Service (LSASS) Microsoft Yes CVE-2026-49799 Uncontrolled Resource Consumption 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/yehuda-smirnov/">Yehuda Smirnov</a> with Microsoft <a href="https://www.linkedin.com/in/naor-evgi/">Naor Evgi</a> with White-Hat LTD <a href="https://www.linkedin.com/in/noam-pomerantz-8917971a0/">Noam Pomerantz</a> with CyberWallGlobal LTD 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Windows NTFS allows an unauthorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50308 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Jianliang Zhao &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Server Elevation of Privilege Vulnerability <p>Improper access control in Windows Server allows an authorized attacker to elevate privileges locally.</p> Windows Server Microsoft Yes CVE-2026-50311 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 mad31k working with TrendAI Zero Day Initiative 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Video Driver Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows USB Video Driver allows an unauthorized attacker to elevate privileges with a physical attack.</p> Windows USB Video Driver Microsoft Yes CVE-2026-49804 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.6 5.8 CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 pwn2addr 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Exposure of sensitive system information to an unauthorized control sphere in Windows Kernel allows an unauthorized attacker to disclose information locally.</p> Windows Kernel Microsoft Yes CVE-2026-50294 Exposure of Sensitive System Information to an Unauthorized Control Sphere 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Spaceport.sys Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Spaceport.sys allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-50333 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 zickzick2 kaymin0128 zickzick2 <a href="https://x.com/calysteon">Nathaniel Oh (@calysteon)</a> <a href="https://www.linkedin.com/in/yurok/">Hae Seong Cho (yurok)</a> Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST <a href="https://x.com/kkiiiiiiiiihh">kang</a> <a href="https://x.com/kkiiiiiiiiihh">kang</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.</p> Windows SMB Microsoft Yes CVE-2026-49801 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 sweetchip 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-49802 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-49806 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> Windows Win32K Microsoft Yes CVE-2026-49805 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 mad31k working with TrendAI Zero Day Initiative 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows AppX Deployment Extensions Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows AppX Deployment Service Microsoft Yes CVE-2026-49803 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> Windows Runtime Microsoft Yes CVE-2026-50323 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50318 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 pwn2addr <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Audio Compression Manager (ACM) Elevation of Privilege Vulnerability <p>Improper access control in Windows Audio Compression Manager (ACM) allows an authorized attacker to elevate privileges locally.</p> Windows Audio Compression Manager (ACM) Microsoft Yes CVE-2026-50351 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://xbreach.ai/">XBreach.ai</a> <a href="https://www.linkedin.com/in/yehuda-smirnov/">Yehuda Smirnov</a> with Microsoft <a href="https://www.linkedin.com/in/naor-evgi/">Naor Evgi</a> with White-Hat LTD <a href="https://www.twitter.com/crowdstrike">CrowdStrike Advanced Research Team</a> with <a href="https://www.crowdstrike.com/">CrowdStrike</a> Mateusz Garncarek with <a href="https://digital-missiles.com/">Digital-Missiles</a> <a href="https://www.linkedin.com/in/ali-shihab-952228318/">Ali Toni</a> with <a href="https://www.esraa.edu.iq/">Al-Esraa University</a> pwn2addr <a href="https://www.linkedin.com/in/andreabocchetti/">Andrea Bocchetti</a> <a href="https://ch.linkedin.com/in/lydericlefebvre">Lyd&#233;ric LEFEBVRE</a> with <a href="https://www.linkedin.com/company/blackfield-security/">Blackfield Security</a> <a href="https://ch.linkedin.com/in/lydericlefebvre">Lyd&#233;ric LEFEBVRE</a> with <a href="https://www.linkedin.com/company/blackfield-security/">Blackfield Security</a> Noam Pomerantz <a href="https://www.linkedin.com/in/vi5halch/">Vishal Chauhan</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DirectX Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows DirectX allows an unauthorized attacker to disclose information locally.</p> Windows DirectX Microsoft Yes CVE-2026-49807 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/boolgombear/">Jmini</a> with <a href="https://stealien.com/main">Stealien</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Improper access control in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-50342 Improper Access Control 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://github.com/cbwang505">ChengBin Wang</a> with <a href="https://www.guolisec.com/">ZheJiang Guoli Security Technology</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Spaceport.sys Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Spaceport.sys allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Spaceport.sys Microsoft Yes CVE-2026-50298 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Nils Holten Nils Holten Anonymous Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-49808 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Internal Task Bar Elevation of Privilege Vulnerability <p>Use after free in Windows Internal Task Bar allows an authorized attacker to elevate privileges locally.</p> Windows Internal Task Bar Microsoft Yes CVE-2026-50293 Use After Free 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Insertion of sensitive information into log file in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L),but lead to no loss of availability (A:N) and integrity (I:N)? What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).</p> Windows Kernel Microsoft Yes CVE-2026-50316 Insertion of Sensitive Information into Log File 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Aman 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50354 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-50296 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Divya 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> Windows Win32K Microsoft Yes CVE-2026-50297 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Improper access control in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> Windows Win32K Microsoft Yes CVE-2026-50325 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.zerodayinitiative.com/">TrendAI Zero Day Initiative</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows App Store Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Windows App Store allows an authorized attacker to elevate privileges locally.</p> Microsoft Windows App Store Microsoft Yes CVE-2026-50356 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Clip Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Clip Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Clip Service Microsoft Yes CVE-2026-50384 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> Younggi Park (grill66), SEC-agent team Pwnforr777 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Zero Trust DNS Security Feature Bypass Vulnerability <p>Improper privilege management in Microsoft Windows DNS allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could bypass Zero Trust DNS (ZTDNS) policy enforcement.</p> Windows DNS Microsoft Yes CVE-2026-50295 Improper Privilege Management 12437 20437 20438 12389 12390 12436 20853 20854 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 ChenJian with Sea Security Orca Team 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Trusted Runtime Interface Driver Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could leak the address of a medium integrity process to a lower integrity caller process.</p> Windows Trusted Runtime Interface Driver Microsoft Yes CVE-2026-50350 Exposure of Sensitive Information to an Unauthorized Actor 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Yun Cong 1.0 2026-07-14T07:00:00 <p>Information published.</p> Composite Image File System driver (cimfs.sys) Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in Composite Image File System Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is file metadata.</p> Composite Image File System Driver Microsoft Yes CVE-2026-50381 Access of Resource Using Incompatible Type ('Type Confusion') 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DWM Core Library Information Disclosure Vulnerability <p>Integer underflow (wrap or wraparound) in Windows Kernel allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Windows Kernel Microsoft Yes CVE-2026-50300 Integer Underflow (Wrap or Wraparound) Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Varun Goel 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Key Guard Security Feature Bypass Vulnerability <p>Use of a cryptographic primitive with a risky implementation in Windows Key Guard allows an authorized attacker to bypass a security feature locally.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>The authentication feature could be bypassed as this vulnerability allows impersonation.</p> Windows Key Guard Microsoft Yes CVE-2026-50303 Use of a Cryptographic Primitive with a Risky Implementation 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Leshi Yang 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Backup Service Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Server Backup Microsoft Yes CVE-2026-50364 Improper Link Resolution Before File Access ('Link Following') 11929 11930 11931 12097 12098 12099 20437 20438 12389 12390 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cryptographic Services Security Feature Bypass Vulnerability <p>Improper certificate validation in Windows Cryptographic Services allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An attacker can obtain keys, which could enable an attacker to partially bypass the application's cryptographic protections. Confidential information could be exposed to malicious users, including configuration data but not including personal information or credentials.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-50302 Improper Certificate Validation 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11923 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11929 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11930 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11931 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12097 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12098 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12099 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12437 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20437 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20438 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12389 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12390 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12436 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20853 4.2 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50332 Heap-based Buffer Overflow Numeric Truncation Error 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://deepsec.darknavy.net/">deepsec</a> with <a href="https://x.com/darknavyorg">DARKNAVY</a> <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Redirected Drive Buffering System Elevation of Privilege Vulnerability <p>Buffer over-read in Windows Redirected Drive Buffering allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.</p> Windows Redirected Drive Buffering Microsoft Yes CVE-2026-50372 Buffer Over-read Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Brokering File System Microsoft Yes CVE-2026-50305 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 hazard 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft DWM Core Library Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50329 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Push Notifications Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Push Notifications Microsoft Yes CVE-2026-50363 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Secure Kernel Mode Elevation of Privilege Vulnerability <p>Use after free in Windows Secure Kernel Mode allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Secure Kernel Mode Microsoft Yes CVE-2026-50392 Use After Free 20438 20854 12389 20853 12437 12390 20437 12436 Elevation of Privilege 20438 Elevation of Privilege 20854 Elevation of Privilege 12389 Elevation of Privilege 20853 Elevation of Privilege 12437 Elevation of Privilege 12390 Elevation of Privilege 20437 Elevation of Privilege 12436 Critical 20438 Critical 20854 Critical 12389 Critical 20853 Critical 12437 Critical 12390 Critical 20437 Critical 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20438 20437 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20438 20437 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 <a href="https://x.com/vmpr0be">vmpr0be</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of availability (A:H). What does that mean for this vulnerability?</strong></p> <p>An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50304 Stack-based Buffer Overflow 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12078-20853 12078-20854 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12078-20853 Denial of Service 12078-20854 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12078-20853 Important 12078-20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Server Update Service (WSUS) Tampering Vulnerability <p>Uncaught exception in Windows Server Update Service allows an unauthorized attacker to perform tampering over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of availability (A:H). What does that mean for this vulnerability?</strong></p> <p>An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).</p> Windows Server Update Service Microsoft Yes CVE-2026-50328 Uncaught Exception Improper Input Validation 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 12437 Tampering 12436 Tampering 10852 Tampering 10853 Tampering 10816 Tampering 10855 Tampering 10378 Tampering 10379 Tampering 10483 Tampering 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 f7d8c52bec79e42795cf15888b85cbad 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows TCP/IP Microsoft Yes CVE-2026-50306 Use After Free Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Server Elevation of Privilege Vulnerability <p>Incorrect implementation of authentication algorithm in Windows SMB Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> Windows SMB Server Microsoft Yes CVE-2026-50360 Incorrect Implementation of Authentication Algorithm 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel-Mode Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-50393 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Matthew Cox with Microsof (internal) Matthew Cox with Microsof (internal) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Windows NTFS Microsoft Yes CVE-2026-50412 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft Internal with Microsoft Thanatos Tian &amp; wgg &amp; @2st__ with Diffract <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> Jmini Microsoft Red Team (MRT) with Microsoft haowei yan &amp; xiaozun tang 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Notification Elevation of Privilege Vulnerability <p>Incorrect type conversion or cast in Windows Notification allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Notification Microsoft Yes CVE-2026-50337 Incorrect Type Conversion or Cast 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50386 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099540 https://support.microsoft.com/help/5099540 11923 11924 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian &amp; wgg &amp; @2st__ with Diffract Microsoft Red Team (MRT) with Microsoft Anonymous <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows App Package Installer Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows App Installer allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows App Installer Microsoft Yes CVE-2026-50400 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50309 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Kernel allows an authorized attacker to disclose information locally.</p> Windows Kernel Microsoft Yes CVE-2026-50419 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11568 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11569 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11571 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11572 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11923 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11929 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11930 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11931 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12097 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12098 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12099 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12437 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20437 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20438 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12389 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12390 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12436 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20853 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20854 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10852 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10853 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10816 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10855 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10378 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10379 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10483 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 hazard 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50368 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12078-20853 12078-20854 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12078-20853 Denial of Service 12078-20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12078-20853 Important 12078-20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 Anonymous 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows TCP/IP Elevation of Privilege Vulnerability <p>Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges locally.</p> Windows TCP/IP Microsoft Yes CVE-2026-50307 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Microsoft LC with VGCO - Vietnam Germany Connection yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Unified Consent System Elevation of Privilege Vulnerability <p>Use after free in Windows Unified Consent System allows an authorized attacker to elevate privileges locally.</p> Windows Unified Consent System Microsoft Yes CVE-2026-50326 Use After Free 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50313 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Audio Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Audio Service allows an authorized attacker to elevate privileges locally.</p> Windows Audio Service Microsoft Yes CVE-2026-50440 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows GDI+ Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by convincing a user to open or process a specially crafted EMF+ file that contains a malicious image record. When the file is rendered, the system may incorrectly handle the image data, causing it to write beyond the bounds of allocated memory and corrupt adjacent memory structures.</p> Windows GDI+ Microsoft Yes CVE-2026-50380 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.6 8.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Media allows an authorized attacker to execute code locally.</p> Windows Media Microsoft Yes CVE-2026-50327 Heap-based Buffer Overflow 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Information Disclosure Vulnerability <p>Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows NTFS Microsoft Yes CVE-2026-50341 Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract <a href="https://linkedin.com/in/rahul-hoysala">Rahul Hoysala</a> with <a href="https://cyber.info">Cyber Info</a> 1.1 2026-07-15T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50407 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 yhw &amp; txz <a href="https://twitter.com/thunderj17">Thunder_J</a> pwn2addr Thanatos Tian &amp; wgg &amp; @2st__ with Diffract 1.0 2026-07-14T07:00:00 <p>Information published.</p> 1.1 2026-07-22T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Application Model Core API Elevation of Privilege Vulnerability <p>Use after free in Windows Application Model allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Application Model Microsoft Yes CVE-2026-50331 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Install Service Elevation of Privilege Vulnerability <p>Improper privilege management in Microsoft Install Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Install Service Microsoft Yes CVE-2026-50343 Improper Privilege Management 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 pwnky <a href="https://www.linkedin.com/in/noam-pomerantz-8917971a0">Noam Pomerantz</a> with <a href="https://www.cyberwallglobal.com/">Cyberwallglobal</a> <a href="https://www.linkedin.com/in/yehuda-smirnov/">Yehuda Smirnov</a> with Microsoft <a href="https://www.linkedin.com/in/naor-evgi/">Naor Evgi</a> with White-Hat LTD <a href="https://www.linkedin.com/in/andreabocchetti/">Andrea Bocchetti</a> <a href="https://github.com/cbwang505">ChengBin Wang</a> with <a href="https://www.guolisec.com/">ZheJiang Guoli Security Technology</a> <a href="https://twitter.com/securiteam_ssd">Anonymous</a> with <a href="https://ssd-disclosure.com/">SSD Secure Disclosure</a> <a href="https://x.com/nadsec11">Daniel Wade</a> with <a href="https://nadsec.online/">nadsec</a> Anonymous yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel-Mode Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel-Mode Drivers allows an authorized attacker to elevate privileges locally.</p> Windows Kernel-Mode Drivers Microsoft Yes CVE-2026-50396 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> DHCP Server Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated user could exploit this vulnerability by sending specially crafted network traffic to a server configured for use as a Dynamic Host Configuration Protocol (DHCP) Server.</p> Windows DHCP Server Microsoft Yes CVE-2026-50370 Heap-based Buffer Overflow Improper Input Validation 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Linzishan &amp; Anemone &amp; Zhiniang Peng (HUST) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Data.dll Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Data dll allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Windows Data.dll Microsoft Yes CVE-2026-50347 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Driver allows an authorized attacker to elevate privileges locally.</p> Windows USB Driver Microsoft Yes CVE-2026-50321 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Kamil Leoniak at Delphos Labs <a href="https://delphoslabs.com/">Delphos Labs</a> Kamil Leoniak at Delphos Labs <a href="https://delphoslabs.com/">Delphos Labs</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Internal System User Profile Elevation of Privilege Vulnerability <p>Use after free in Windows Internal System User Profile allows an authorized attacker to elevate privileges locally.</p> Windows Internal System User Profile Microsoft Yes CVE-2026-50425 Use After Free 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Vamshi Krishna Bolly 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Image Acquisition Elevation of Privilege Vulnerability <p>Null pointer dereference in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to Local Service.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Image Acquisition Microsoft Yes CVE-2026-50315 NULL Pointer Dereference 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Push Notification Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could leak the address of a medium integrity process to a lower integrity caller process.</p> Windows Push Notifications Microsoft Yes CVE-2026-50434 Exposure of Sensitive Information to an Unauthorized Actor 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Yun Cong 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Push Notification Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could leak the address of a medium integrity process to a lower integrity caller process.</p> Windows Push Notifications Microsoft Yes CVE-2026-50339 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Yun Cong 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Push Notification Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Push Notifications allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could leak the address of a medium integrity process to a lower integrity caller process.</p> Windows Push Notifications Microsoft Yes CVE-2026-50430 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Yun Cong 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Human Interface Device Information Disclosure Vulnerability <p>Integer overflow or wraparound in Windows Devices Human Interface allows an authorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain memory address within kernel space. Knowing the exact location of kernel memory could be potentially leveraged by an attacker for other malicious activities.</p> Windows Devices Human Interface Microsoft Yes CVE-2026-50310 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.twitter.com/crowdstrike">CrowdStrike Advanced Research Team</a> with <a href="https://www.crowdstrike.com/">CrowdStrike</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50324 Loop with Unreachable Exit Condition ('Infinite Loop') 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10483 10543 12078-20853 12078-20854 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10483 Denial of Service 10543 Denial of Service 12078-20853 Denial of Service 12078-20854 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Important 12078-20853 Important 12078-20854 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 Anonymous Anonymous 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-50312 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Soon Oh with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to elevate privileges over a network.</p> Remote Desktop Client Microsoft Yes CVE-2026-50330 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Nicholas Vadasz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability <p>Numeric truncation error in Windows Resilient File System (ReFS) allows an authorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50357 Numeric Truncation Error 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Windows Kernel Microsoft Yes CVE-2026-50377 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 10852 10853 10816 10855 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Gabriela Kote with Microsoft <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 1.1 2026-07-22T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> Windows Kernel Microsoft Yes CVE-2026-50390 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 wisi 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50452 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50348 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50345 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50322 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Operating Systems Elevation of Privilege Vulnerability <p>Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Operating Systems Microsoft Yes CVE-2026-50335 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="http://www.linkedin.com/in/tomer-peled">Tomer Peled</a> with Akamai 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DirectX allows an authorized attacker to elevate privileges locally.</p> Windows DirectX Microsoft Yes CVE-2026-50375 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11568 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11569 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11571 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11572 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11923 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11929 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11930 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 11931 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12097 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12098 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12099 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12437 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20437 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20438 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12389 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12390 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12436 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20853 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil</a> esakis Thanatos Tian (HKPolyU) & wgg & npc0vo with Diffract <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> Anonymous yhw &amp; txz 1.1 2026-07-15T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Double free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.</p> Windows Brokering File System Microsoft Yes CVE-2026-50361 Double Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 hazard 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Operating Systems Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Operating Systems allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Operating Systems Microsoft Yes CVE-2026-50317 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network.</p> Windows Runtime Microsoft Yes CVE-2026-50340 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.5 7.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.</p> Windows Media Microsoft Yes CVE-2026-50404 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Domain Services Denial of Service Vulnerability <p>Null pointer dereference in Active Directory Domain Services allows an authorized attacker to deny service over a network.</p> Active Directory Domain Services Microsoft Yes CVE-2026-50366 NULL Pointer Dereference 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 WARP and ACS teams at Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L),but lead to no loss of availability (A:N) and integrity (I:N)? What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality) but not all resources within the impacted component may be divulged to the attacker. The attacker cannot make changes to disclosed information (Integrity) or limit access to the resource (Availability).</p> Windows Win32K Microsoft Yes CVE-2026-50416 Exposure of Sensitive Information to an Unauthorized Actor 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12437 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20437 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20438 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12389 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12390 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12436 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20853 3.3 2.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> with <a href="https://stealien.com/main">Stealien</a> <a href="https://twitter.com/crowdstrike">CrowdStrike Advanced Research Team</a> with <a href="https://www.crowdstrike.com/">CrowdStrike</a> <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> <a href="https://x.com/karollooool">Karol Nieckarz</a> with <a href="https://karollol.vercel.app/">independent security research</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Use after free in Windows Media allows an authorized attacker to elevate privileges locally.</p> Windows Media Microsoft Yes CVE-2026-50358 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Stack-based buffer overflow in Active Directory Federation Services allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50355 Stack-based Buffer Overflow 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12078-20853 12078-20854 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12078-20853 Denial of Service 12078-20854 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12078-20853 Important 12078-20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Container Isolation FS Filter Driver (unionfs.sys) Microsoft Yes CVE-2026-50428 Out-of-bounds Read 20853 20854 Information Disclosure 20853 Information Disclosure 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20854 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Improper access control in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-50373 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Yun Cong 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.</p> Windows DirectX Microsoft Yes CVE-2026-50353 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 SnowRockLab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Out-of-bounds read in Windows NTFS allows an unauthorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50388 Out-of-bounds Read Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50410 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50449 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows LUAFV allows an authorized attacker to elevate privileges locally.</p> Windows LUAFV Microsoft Yes CVE-2026-50371 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Nguyễn Văn Thiện LC with VGCO - Vietnam Germany Connection 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Media allows an authorized attacker to elevate privileges locally.</p> Windows Media Microsoft Yes CVE-2026-50336 Heap-based Buffer Overflow 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-50398 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-50414 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-50379 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Windows Kernel Microsoft Yes CVE-2026-50463 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50460 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50403 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Use after free in Windows Media allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-50433 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Group Policy Elevation of Privilege Vulnerability <p>Improper privilege management in Windows Group Policy allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Group Policy Microsoft Yes CVE-2026-50391 Improper Privilege Management 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/filip_dragovic">Filip Dragović</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows System Secure Feature Bypass Vulnerability <p>Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>The authentication feature could be bypassed as this vulnerability allows impersonation.</p> Windows System Microsoft Yes CVE-2026-50418 Improper Access Control 11923 12437 20437 20438 12389 12390 12436 20853 20854 Security Feature Bypass 11923 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Important 11923 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11923 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12437 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20437 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20438 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12389 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12390 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 12436 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20853 5.1 4.5 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50423 Improper Access Control 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/filip_dragovic">Filip Dragović</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Key Guard Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Key Guard allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Key Guard Microsoft Yes CVE-2026-50378 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Leshi Yang 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-50401 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/ranchoice">RanchoIce</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Netlogon RPC Elevation of Privilege Vulnerability <p>Improper authorization in RPC Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> RPC Runtime Microsoft Yes CVE-2026-50346 Improper Authorization 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Howard McGreehan with MSRC V&M 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>This attack requires a victim user on the client to enable Remote Audio Playback and Recording and connect to a malicious server.</p> Windows RDP Microsoft Yes CVE-2026-50376 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/mas0nshi">YingQi Shi</a> with <a href="https://www.dbappsecurity.com.cn/product/cloud250.html">DBAPPSecurity WeBin Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>For an attacker to exploit this vulnerability, they would need to have knowledge of a specific operation that triggers a memory allocation failure, specifically a use after free.</p> Windows Kernel Microsoft Yes CVE-2026-50397 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 hazard 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Filtering Platform Elevation of Privilege Vulnerability <p>Insufficient granularity of access control in Windows Filtering Platform (WFP) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Filtering Platform (WFP) Microsoft Yes CVE-2026-50405 Insufficient Granularity of Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Prayas(Pro bear) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>A user would need to mount a .vhd file to be compromised by the attacker.</p> Windows NTFS Microsoft Yes CVE-2026-50448 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows GDI Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows GDI allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows GDI Microsoft Yes CVE-2026-50387 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 11951 12155 12440 21368 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 11951 Elevation of Privilege 12155 Elevation of Privilege 12440 Elevation of Privilege 21368 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 11951 Important 12155 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12155 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://play.google.com/store/apps/details?id=com.microsoft.office.officehubrow 12155 Maybe Security Update 16.0.20228.20042 https://support.google.com/googleplay/answer/113412?hl=en 12155 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim Anonymous Kentaro Kawane with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae, Inc.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Push Notification Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Notification allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could leak the address of a medium integrity process to a lower integrity caller process.</p> Windows Notification Microsoft Yes CVE-2026-50334 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Yun Cong 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Buffer over-read in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.</p> Windows RDP Microsoft Yes CVE-2026-50445 Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Sanil Singh Tomar with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows OLE Elevation of Privilege Vulnerability <p>Improper authorization in Windows OLE allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows OLE Microsoft Yes CVE-2026-50344 Improper Authorization 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Hart Wilson with <a href="https://www.microsoft.com/">Microsoft</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cryptographic Services Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could obtain limited memory-related information, specifically a heap address returned by the affected service.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-50352 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Windows DirectX allows an authorized attacker to execute code locally.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker can exploit this vulnerability by getting access to the local guest VM so they can attack the Host OS.</p> Windows DirectX Microsoft Yes CVE-2026-50382 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 pwn2addr 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50436 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DWM Core Library Information Disclosure Vulnerability <p>Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.</p> Windows DWM Core Library Microsoft Yes CVE-2026-50437 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Varun Goel 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>A user would need to mount a .vhd file to be compromised by the attacker.</p> Windows NTFS Microsoft Yes CVE-2026-50471 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11924 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12242 Remote Code Execution 12243 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099540 https://support.microsoft.com/help/5099540 11923 11924 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST <a href="https://x.com/immortalp0ny">Sergey immortalp0ny Tarasov</a> with <a href="https://global.ptsecurity.com/">Positive Technologies</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Elevation of Privilege Vulnerability <p>Use after free in Windows Remote Desktop Services allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>To successfully exploit this elevation of privilege vulnerability, an attacker would be required to perform a remote connection to a vulnerable machine and then manipulate the size of memory allocation through integer overflow.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-50369 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/mateusz-g-509241140/">Mateusz Garncarek</a> with <a href="https://digital-missiles.com/">Digital-Missiles</a> <a href="https://github.com/ffreestanding">Xuanzhe Yu</a> <a href="https://github.com/syxlox">syxlox</a> with <a href="https://www.siemens-energy.com/global/en/home.html">Siemens Energy</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Projected File System Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would be able to delete any system files.</p> Windows Projected File System Microsoft Yes CVE-2026-50469 Improper Link Resolution Before File Access ('Link Following') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/bad_jubies">Grant Hume</a> <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows User Interface Core Elevation of Privilege Vulnerability <p>Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker would be able to delete any system files.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows User Interface Core Microsoft Yes CVE-2026-50454 Relative Path Traversal 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 @2st___ of Diffract Zhiniang Peng with HUST Thanatos Tian of Diffract Anonymous Daniel Friedl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Remote Access Management service/API (RPC server) Elevation of Privilege Vulnerability <p>Improper authentication in Windows RPC API allows an unauthorized attacker to elevate privileges over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>This vulnerability's attack is limited at the protocol level to a logically adjacent topology. This means it cannot simply be done across the internet, but instead needs something specific tied to the target. Good examples would include the same shared physical network (such as Bluetooth or IEEE 802.11), logical network (local IP subnet), or from within a secure or otherwise limited administrative domain (MPLS, secure VPN to an administrative network zone). This is common to many attacks that require machine-in-the-middle (MITM) type setups or that rely on initially gaining a foothold in another environment.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>To trigger this vulnerability, a user must actively connect to the affected server and run a specific command. The vulnerability cannot be triggered automatically or in the background; it only occurs when a user intentionally interacts with the server using this command.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows RPC API Microsoft Yes CVE-2026-50365 Improper Authentication 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 10852 10853 10816 10855 10378 10379 10483 10543 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Howard McGreehan with MSRC V&amp;M 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DNS Server Remote Code Execution Vulnerability <p>Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.</p> <p><strong>According to the CVSS score, the attack vector is adjacent (AV:A). What does this mean for this vulnerability?</strong></p> <p>This attack is limited to systems connected to the same network segment as the attacker. The attack cannot be performed across multiple networks (for example, a WAN) and would be limited to systems on the same network switch or virtual network.</p> <p><strong>According to the CVSS metric, privileges required is high (PR:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires the attacker to be part of DnsAdmins group. As is best practice, regular validation and audits of administrative groups should be conducted.</p> Role: DNS Server Microsoft Yes CVE-2026-50426 Relative Path Traversal 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 6.8 5.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 pwnky 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows Runtime Microsoft Yes CVE-2026-50385 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from a Low Integrity Level in a contained (&quot;sandboxed&quot;) execution environment to a Medium Integrity Level. Please refer to <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/appcontainer-isolation">AppContainer isolation</a> and <a href="https://learn.microsoft.com/en-us/windows/win32/secauthz/mandatory-integrity-control">Mandatory Integrity Control</a> for more information.</p> Windows Runtime Microsoft Yes CVE-2026-50413 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Content Delivery Manager Elevation of Privilege Vulnerability <p>Use after free in Content Delivery Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> Content Delivery Manager Microsoft Yes CVE-2026-50427 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-50422 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft Internal with Microsoft Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Connected User Experiences and Telemetry Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows Connected User Experiences and Telemetry allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Connected User Experiences and Telemetry Microsoft Yes CVE-2026-50421 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Zhang WangJunJie@Hillstone, He YiSheng 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-50374 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Axel Mierczuk with <a href="https://www.trailofbits.com/">Trail of Bits</a> Maciej Domanski with <a href="https://www.trailofbits.com/">Trail of Bits</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Sensor Data Service Elevation of Privilege Vulnerability <p>Incorrect access of indexable resource ('range error') in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.</p> Windows Sensor Data Service Microsoft Yes CVE-2026-50367 Incorrect Access of Indexable Resource ('Range Error') Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Dongjun Lee (m0nd2y) with KAIST Hacking Lab Anonymous Thanatos Tian &amp; wxz &amp; @2st__ with Diffract Dongjun Lee (m0nd2y) with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Print Spooler Information Disclosure Vulnerability <p>Buffer over-read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-50383 Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11923 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11929 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11930 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11931 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12097 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12098 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12099 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12437 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20437 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20438 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12389 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12390 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12436 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20853 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-50451 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Universal Plug and Play (upnp.dll) Information Disclosure Vulnerability <p>Use of uninitialized resource in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>This vulnerability could allow a local, non‑administrator attacker to read any files that are accessible to the UPnP Device Host Service, which runs under the LOCAL SERVICE account. This may include restricted system files or configuration data that the attacker would not normally be able to access. The specific information exposed depends on the files that the service is permitted to read.</p> Universal Plug and Play (upnp.dll) Microsoft Yes CVE-2026-50455 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 AI&#39;s physical interface 03 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Use after free in Windows Brokering File System allows an authorized attacker to elevate privileges locally.</p> Windows Brokering File System Microsoft Yes CVE-2026-50466 Use After Free 12437 20437 20438 12390 12389 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12390 Elevation of Privilege 12389 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12390 Important 12389 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12390 12389 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12390 12389 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 byzero with Kunlun Lab & Zhiniang Peng (HUST) <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> <a href="https://x.com/bad_jubies">Grant Hume</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 1.1 2026-07-22T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> NTFS Elevation of Privilege Vulnerability <p>Incorrect conversion between numeric types in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Windows NTFS Microsoft Yes CVE-2026-50402 Incorrect Conversion between Numeric Types Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract Jiayi Sun 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Overlay Filter Elevation of Privilege Vulnerability <p>Buffer over-read in Windows Overlay Filter allows an authorized attacker to elevate privileges locally.</p> Windows Overlay Filter Microsoft Yes CVE-2026-50435 Buffer Over-read Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/cplearns2h4ck">Chen Le Qi (@cplearns2h4ck)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Overlay Filter Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Overlay Filter allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows Overlay Filter Microsoft Yes CVE-2026-50409 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://x.com/cplearns2h4ck">Chen Le Qi(@cplearns2h4ck)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50441 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Yongha Lee <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim Thanatos Tian (HKPolyU) &amp; wgg &amp; @2st__ with Diffract &amp; Zhiniang Peng with HUST 1.1 2026-07-22T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DNS Client Tampering Vulnerability <p>Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.</p> Windows DNS Microsoft Yes CVE-2026-50465 Improper Access Control 12437 20437 20438 12389 12390 12436 20853 20854 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Message Queuing Queue Manager Remote Code Execution Vulnerability <p>Use after free in Microsoft Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network.</p> Windows Message Queuing Queue Manager Microsoft Yes CVE-2026-50439 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 k0shl k0shl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-50462 External Control of File Name or Path 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/scwuaptx">Angelboy (@scwuaptx)</a> with <a href="https://devco.re/">DEVCORE</a> <a href="https://bsky.app/profile/hexnomad.bsky.social">Erik Egsgard</a> with <a href="https://fieldeffect.com/">Field Effect</a> 1.1 2026-07-21T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could elevate from a low integrity level up to a medium integrity level.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50457 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Vamshi Krishna Bolly 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the server object address.</p> Windows File Explorer Microsoft Yes CVE-2026-50473 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the server object address.</p> Windows File Explorer Microsoft Yes CVE-2026-50442 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the server object address.</p> Windows File Explorer Microsoft Yes CVE-2026-50389 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could leak the address of a medium integrity process to a lower integrity caller process.</p> Windows File Explorer Microsoft Yes CVE-2026-50456 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Window Virtual Filtering Platform (VFP) Denial of Service Vulnerability <p>Use after free in Windows Virtual Filtering Platform (VFP) allows an authorized attacker to deny service over a network.</p> Windows Virtual Filtering Platform (VFP) Microsoft Yes CVE-2026-50432 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.3 4.6 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Jun Young Lee with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50399 Out-of-bounds Read 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Arjun Vasudeva with MSRC Exploit Research Team 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>A user would need to mount a .vhd file to be compromised by the attacker.</p> Windows NTFS Microsoft Yes CVE-2026-50461 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Quality of Service (QoS) Packet Scheduler Information Disclosure Vulnerability <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain memory address within kernel space. Knowing the exact location of kernel memory could be potentially leveraged by an attacker for other malicious activities.</p> Windows Quality of Service (QoS) Packet Scheduler Microsoft Yes CVE-2026-50431 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 hazard 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Audio Class Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.</p> Windows USB Audio Class driver (usbaudio.sys) Microsoft Yes CVE-2026-50453 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11923 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11929 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11930 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11931 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12097 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12098 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12099 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12437 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20437 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20438 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12389 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12390 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12436 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20853 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20854 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10852 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10853 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10816 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10855 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10378 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10379 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10483 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50417 Heap-based Buffer Overflow Improper Input Validation 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous Jonghoi Kim <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Thanatos Tian &amp; @2st__ with Diffract yhw &amp; txz Anonymous Microsoft Red Team (MRT) with Microsoft R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Message Queuing allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending a specially crafted request containing a maliciously formed domain name to a vulnerable service. When the system processes this input, it may incorrectly calculate the required memory size and write beyond the allocated buffer, resulting in memory corruption that could allow further compromise of the affected system.</p> Windows Message Queuing Microsoft Yes CVE-2026-50447 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft PC Manager Elevation of Privilege Vulnerability <p>Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally.</p> Window PC Manager Microsoft Yes CVE-2026-50438 Improper Link Resolution Before File Access ('Link Following') 12441 Elevation of Privilege 12441 Important 12441 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12441 Release Notes https://apps.microsoft.com/detail/9pm860492szd?hl=en-us&gl=US 12441 Maybe Security Update 3.22.1.0 https://apps.microsoft.com/detail/9pm860492szd?hl=en-us&gl=US 12441 Release Notes .bat 1.0 2026-07-14T07:00:00 <p>Information published.</p> HTTP.sys Information Disclosure Vulnerability <p>Out-of-bounds read in Windows HTTP.sys allows an unauthorized attacker to disclose information locally.</p> Windows HTTP.sys Microsoft Yes CVE-2026-50420 Out-of-bounds Read 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50362 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Donghyeon Oh with Patchpoint and Jonghoi Kim Donghyeon Oh with Patchpoint and Jonghoi Kim 1.0 2026-07-14T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Use after free in Remote Desktop Client allows an unauthorized attacker to execute code over a network.</p> Remote Desktop Client Microsoft Yes CVE-2026-50474 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Active Directory Federation Services Denial of Service Vulnerability <p>Stack-based buffer overflow in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50411 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12078-20853 12078-20854 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12078-20853 Denial of Service 12078-20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12078-20853 Important 12078-20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 Anonymous 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability <p>Missing authentication for critical function in Windows Server Update Service allows an authorized attacker to elevate privileges over a network.</p> Windows Server Update Service Microsoft Yes CVE-2026-50444 Missing Authentication for Critical Function 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hugow_vincent">Hugo VINCENT</a> with <a href="https://www.synacktiv.com/">Synacktiv</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Media allows an authorized attacker to disclose information locally.</p> Windows Media Microsoft Yes CVE-2026-50394 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Media allows an unauthorized attacker to disclose information over a network.</p> Windows Media Microsoft Yes CVE-2026-50415 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11568 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11569 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11571 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11572 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11923 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11929 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11930 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11931 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12097 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12098 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12099 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12437 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20437 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20438 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12389 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12390 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 12436 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20853 5.3 4.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 David Zhu with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Brokering File System Elevation of Privilege Vulnerability <p>Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.</p> Windows Brokering File System Microsoft Yes CVE-2026-50458 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 anonymous anonymous <a href="https://x.com/rotcee_">Rotce</a> 1.1 2026-07-22T07:00:00 <p>Updated an acknowledgement. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Buffer over-read in Windows Kernel allows an authorized attacker to disclose information locally.</p> Windows Kernel Microsoft Yes CVE-2026-50475 Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> KPC with Cisco Talos KPC with Cisco Talos 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network Connections Service Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft Windows Microsoft Yes CVE-2026-50476 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> Younggi Park (grill66), SEC-agent team 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Kernel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the contents of Kernel memory. An attacker could read the contents of Kernel memory from a user mode process.</p> Windows Kernel Microsoft Yes CVE-2026-50429 Out-of-bounds Read Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11568 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11569 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11571 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11572 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11923 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11929 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11930 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 11931 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12097 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12098 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12099 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12437 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20437 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20438 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12389 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12390 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 12436 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20853 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20854 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 10852 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 10853 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 10816 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://mylostchristmas.tistory.com/">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network Connections Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Wireless Wide Area Network Service Microsoft Yes CVE-2026-50450 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Domain Controller Denial of Service Vulnerability <p>Untrusted pointer dereference in Windows Domain Controller allows an unauthorized attacker to deny service over a network.</p> Windows Domain Controller Microsoft Yes CVE-2026-50424 Untrusted Pointer Dereference 12437 20437 20438 12389 12390 12436 20853 20854 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 [Yuval Gordon](https://x.com/yug0rd) with Akamai [Yuval Gordon](https://x.com/yug0rd) with Akamai 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Backup Engine Elevation of Privilege Vulnerability <p>Use after free in Windows Backup Engine allows an authorized attacker to elevate privileges locally.</p> Windows Backup Engine Microsoft Yes CVE-2026-50406 Use After Free 11929 11930 11931 12097 12098 12099 20437 20438 12389 12390 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network Policy Server SNMP Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of process memory.</p> Windows Network Policy Server SNMP Microsoft Yes CVE-2026-50470 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Lewis Lee &amp; Anemone &amp; Zhiniang Peng (HUST) Lewis Lee &amp; Anemone &amp; Zhiniang Peng (HUST) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50459 Use After Free 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50477 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://mylostchristmas.tistory.com/">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50478 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Gabriela Kote with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Hub Driver Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Windows USB Hub Driver allows an authorized attacker to elevate privileges locally.</p> Windows USB Hub Driver Microsoft Yes CVE-2026-50479 Untrusted Pointer Dereference 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 12436 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 12436 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 Adrian Denkiewicz at Doyensec in collaboration with Anthropic Research [Adrian Denkiewicz at Doyensec in collaboration with Claude and Anthropic Research](https://doyensec.com) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Web Proxy Auto-Discovery Protocol (WPAD) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Web Proxy Auto-Discovery Protocol (WPAD) allows an authorized attacker to elevate privileges locally.</p> Windows Web Proxy Auto-Discovery Protocol (WPAD) Microsoft Yes CVE-2026-50480 Heap-based Buffer Overflow 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099415 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099415 5099415 10378 10379 10483 10543 Yes IE Cumulative 1.000 https://support.microsoft.com/help/5099415 10378 10379 10483 10543 5099415 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Rutuja Shirali with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50482 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.3 6.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> DNS Client Tampering Vulnerability <p>Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.</p> Windows DNS Microsoft Yes CVE-2026-50495 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Tampering 11568 Tampering 11569 Tampering 11571 Tampering 11572 Tampering 11923 Tampering 11929 Tampering 11930 Tampering 11931 Tampering 12097 Tampering 12098 Tampering 12099 Tampering 12437 Tampering 20437 Tampering 20438 Tampering 12389 Tampering 12390 Tampering 12436 Tampering 20853 Tampering 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11923 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11929 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11930 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 11931 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12097 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12098 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12099 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12437 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 20437 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 20438 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12389 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12390 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 12436 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 20853 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Sneha Ravichandran with microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Graphics Component Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Microsoft Graphics Component allows an authorized attacker to disclose information locally.</p> Microsoft Graphics Component Microsoft Yes CVE-2026-50483 Exposure of Sensitive Information to an Unauthorized Actor 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="http://alruabye.net/">Hussein Alrubaye</a> with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50484 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.</p> Windows Graphics Kernel Microsoft Yes CVE-2026-50493 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/jung-hyun-yoon-bb9988114/">YuilMuil(Yoon Jung Hyun)</a> <a href="https://x.com/dungnm_">dungnm</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://x.com/dungnm_">dungnm</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> Anonymous SnowRockLab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Event Logging Service Remote Code Execution Vulnerability <p>Insufficient granularity of access control in Windows Event Logging Service allows an authorized attacker to execute code over a network.</p> Windows Event Logging Service Microsoft Yes CVE-2026-50502 Insufficient Granularity of Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hackanddo">Romain BENTZ</a> with <a href="https://login-securite.com/">Login S&#233;curit&#233;</a> <a href="https://x.com/bad_jubies">Grant Hume</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Hyper-V Denial of Service Vulnerability <p>Buffer over-read in Windows Hyper-V allows an authorized attacker to deny service over an adjacent network.</p> Windows Hyper-V Microsoft Yes CVE-2026-50485 Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 10852 10853 10816 10855 10378 10379 10483 10543 20854 20853 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 20854 Denial of Service 20853 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 20854 Important 20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 4.5 3.9 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 Anonymous Anonymous <a href="https://x.com/physicube">Jungwoo Lee</a> with <a href="https://softsec.kaist.ac.kr/">KAIST SoftSec Lab</a> <a href="https://x.com/_qwerty_po">Wongi Lee</a> with <a href="https://xint.io/">Theori</a> Linzishan &amp; Anemone &amp; Zhiniang Peng (HUST) sweetchip Daejin Lee 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50486 Use After Free 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Vamshi Krishna Bolly 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DNS Client Elevation of Privilege Vulnerability <p>Use after free in Microsoft Windows DNS allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DNS Microsoft Yes CVE-2026-50487 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Clipboard User Service Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Windows Clipboard User Service allows an authorized attacker to elevate privileges locally.</p> Windows Clipboard User Service Microsoft Yes CVE-2026-50488 Improper Neutralization of Special Elements used in a Command ('Command Injection') 12437 20437 20438 12389 12390 12436 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 Pwnforr777 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Netlogon Elevation of Privilege Vulnerability <p>Use after free in Windows Netlogon allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Netlogon Microsoft Yes CVE-2026-50500 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Print Spooler Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-50499 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8">Brandon Fisher</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-50489 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous Marcin Wiązowski 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to execute code locally.</p> Windows NTFS Microsoft Yes CVE-2026-50494 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/immortalp0ny">Sergey immortalp0ny Tarasov</a> with <a href="https://global.ptsecurity.com/">Positive Technologies</a> <a href="https://www.linkedin.com/in/boolgombear/">Minjea Park</a> with <a href="https://stealien.com/">STEALIEN</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Windows Installer Microsoft Yes CVE-2026-50490 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://linkedin.com/in/jongseongkim">Jongseong Kim (nevul37), SEC-agent team</a> <a href="https://linkedin.com/in/hwiwonlee">Hwiwon Lee (hwiwonl), SEC-agent team</a> Younggi Park (grill66), SEC-agent team <a href="https://linkedin.com/in/kdj-smlijun">Dongjun Kim (smlijun), SEC-agent team</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Universal Disk Format File System Driver (UDFS) Elevation of Privilege Vulnerability Windows Universal Disk Format File System Driver (UDFS) Microsoft Yes CVE-2026-50498 Out-of-bounds Read Integer Underflow (Wrap or Wraparound) 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Message Queuing Service (MSMQ) Remote Code Execution Vulnerability <p>Use after free in Windows Message Queuing allows an authorized attacker to execute code over a network.</p> Windows Message Queuing Microsoft Yes CVE-2026-50505 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 k0shl k0shl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Code Integrity DLL (ci.dll) Elevation of Privilege Vulnerability <p>Out-of-bounds read in Code Integrity DLL (ci.dll) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Code Integrity DLL (ci.dll) Microsoft Yes CVE-2026-50491 Out-of-bounds Read Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://x.com/vcslab">Viettel Cyber Security</a> <a href="https://x.com/dark_puzzle">Souhail Hammou</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code with a physical attack.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50492 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 pwn2addr <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-50501 Stack-based Buffer Overflow 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim Thanatos Tian &amp; wgg &amp; @2st__ with Diffract pwn2addr <a href="https://x.com/m4x_1997">Aobo Wang</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-50503 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Off-by-one error in Windows Remote Desktop Protocol allows an unauthorized attacker to disclose information over a network.</p> Windows Remote Desktop Protocol Microsoft Yes CVE-2026-50497 Off-by-one Error Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network Policy Server SNMP Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Network Policy Server SNMP allows an unauthorized attacker to disclose information over a network.</p> Windows Network Policy Server SNMP Microsoft Yes CVE-2026-50496 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Zishan Lin &amp; Anemone &amp; Zhiniang Peng (HUST) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Buffer over-read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.</p> Remote Desktop Client Microsoft Yes CVE-2026-50504 Buffer Over-read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Elevation of Privilege Vulnerability <p>Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker could inject arbitrary T-SQL commands by crafting a malicious database name.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain sysadmin privileges.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-47295 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') 21372 21563 11478 11821 12048 12053 12145 12147 20748 16785 Elevation of Privilege 21372 Elevation of Privilege 21563 Elevation of Privilege 11478 Elevation of Privilege 11821 Elevation of Privilege 12048 Elevation of Privilege 12053 Elevation of Privilege 12145 Elevation of Privilege 12147 Elevation of Privilege 20748 Elevation of Privilege 16785 Important 21372 Important 21563 Important 11478 Important 11821 Important 12048 Important 12053 Important 12145 Important 12147 Important 20748 Important 16785 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21372 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21563 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11478 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11821 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12048 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12053 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12145 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12147 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20748 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16785 5101347 https://www.microsoft.com/download/details.aspx?familyid=2c52560b-6fd0-4ceb-8d60-0c540d910d01 21372 Maybe Security Update 16.0.4262.2 https://support.microsoft.com/help/5101347 21372 5101347 5101347 https://support.microsoft.com/help/5101347 21372 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 5102338 https://www.microsoft.com/download/details.aspx?familyid=fa1a9c50-337c-4351-88e3-0874a53e57bb 11478 Maybe Security Update 14.0.2120.1 https://support.microsoft.com/help/5102338 11478 5102338 5102338 https://support.microsoft.com/help/5102338 11478 5102336 https://www.microsoft.com/download/details.aspx?familyid=4f9970c0-88ef-4901-a471-851255f05be8 11821 Maybe Security Update 15.0.2180.2 https://support.microsoft.com/help/5102336 11821 5102336 5102336 https://support.microsoft.com/help/5102336 11821 5102340 https://www.microsoft.com/download/details.aspx?familyid=a84c7105-2738-4d87-bea7-29846cb384ae 12048 Maybe Security Update 13.0.6500.1 https://support.microsoft.com/help/5102340 12048 5102340 5102340 https://support.microsoft.com/help/5102340 12048 5102339 https://www.microsoft.com/download/details.aspx?familyid=6a7d7b5b-d102-4114-b131-899859ecc3cc 12053 Maybe Security Update 13.0.7095.1 https://support.microsoft.com/help/5102339 12053 5102339 5102339 https://support.microsoft.com/help/5102339 12053 5102337 https://www.microsoft.com/download/details.aspx?familyid=22c8589d-8b4f-41a4-a7b3-072a8bd4aa3a 12145 Maybe Security Update 14.0.3540.1 https://support.microsoft.com/help/5102337 12145 5102337 5102337 https://support.microsoft.com/help/5102337 12145 5102334 https://www.microsoft.com/download/details.aspx?familyid=db5e12bd-676a-4324-b736-10053a1d34cf 12147 Maybe Security Update 16.0.1190.2 https://support.microsoft.com/help/5102334 12147 5102334 5102334 https://support.microsoft.com/help/5102334 12147 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 5102335 https://www.microsoft.com/download/details.aspx?familyid=0a742248-b0b1-4008-87ac-32af17ce5f2c 16785 Maybe Security Update 15.0.4480.2 https://support.microsoft.com/help/5096773 16785 5102335 Anonymous <a href="https://www.linkedin.com/in/fabianoamorim/">Fabiano Amorim</a> with <a href="https://pythian.com/">Pythian</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability <p>Deserialization of untrusted data in Windows Wireless Wide Area Network Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Wireless Wide Area Network Service Microsoft Yes CVE-2026-50509 Deserialization of Untrusted Data 11568 11569 11571 11572 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://github.com/cbwang505">ChengBin Wang</a> with <a href="https://www.guolisec.com/">ZheJiang Guoli Security Technology</a> pwnky 1.0 2026-07-14T07:00:00 <p>Information published.</p> GitHub Copilot Remote Code Execution Vulnerability <p>Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.</p> Github Copilot Microsoft Yes CVE-2026-50510 Improper Restriction of Names for Files and Other Resources 20677 Remote Code Execution 20677 Important 20677 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20677 https://plugins.jetbrains.com/plugin/17718-github-copilot--your-ai-pair-programmer/versions/stable/1103496 20677 Maybe Security Update 1.13.0-251 https://plugins.jetbrains.com/plugin/17718-github-copilot--your-ai-pair-programmer/versions/stable/1103496 20677 Nacl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending specially crafted network requests containing malicious domain name data to a system running the affected component. Because the function does not correctly validate the size of incoming data, the malformed input may cause memory corruption, which an attacker could use to disrupt the service or potentially execute code on the affected system.</p> Windows DHCP Server Microsoft Yes CVE-2026-50518 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Amit Schendel with Ventris Linzishan & Anemone & Zhiniang Peng (Hust) Owen McCullough with MSRC V&amp;M 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-50525 Allocation of Resources Without Limits or Throttling 12459 20838 20839 12414 12415 12416 16767 12433 12432 12434 2472-20854 12078-20853 2472-20853 21581 12078-20854 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 2472-10378 2472-10379 2472-10483 2472-10543 Denial of Service 12459 Denial of Service 20838 Denial of Service 20839 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 16767 Denial of Service 12433 Denial of Service 12432 Denial of Service 12434 Denial of Service 2472-20854 Denial of Service 12078-20853 Denial of Service 2472-20853 Denial of Service 21581 Denial of Service 12078-20854 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 2472-10378 Denial of Service 2472-10379 Denial of Service 2472-10483 Denial of Service 2472-10543 Important 12459 Important 20838 Important 20839 Important 12414 Important 12415 Important 12416 Important 16767 Important 12433 Important 12432 Important 12434 Important 2472-20854 Important 12078-20853 Important 2472-20853 Important 21581 Important 12078-20854 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12459 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21581 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12433 12432 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12433 12432 12434 5104033 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 2472-20854 2472-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 Levi Broderick 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 3.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> .NET Tampering Vulnerability <p>Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally.</p> .NET Microsoft Yes CVE-2026-50526 Improper Link Resolution Before File Access ('Link Following') Insufficient Verification of Data Authenticity 12459 12433 12416 12432 12434 12415 20838 12414 20839 21581 16767 Tampering 12459 Tampering 12433 Tampering 12416 Tampering 12432 Tampering 12434 Tampering 12415 Tampering 20838 Tampering 12414 Tampering 20839 Tampering 21581 Tampering 16767 Important 12459 Important 12433 Important 12416 Important 12432 Important 12434 Important 12415 Important 20838 Important 12414 Important 20839 Important 21581 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12459 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12433 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12416 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12432 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12415 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20838 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20839 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12433 12432 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12433 12432 12434 5104033 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12416 12415 12414 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12416 12415 12414 5104032 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Siwei Li with Microsoft Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Framework Denial of Service Vulnerability <p>Stack-based buffer overflow in .NET Framework allows an unauthorized attacker to deny service over a network.</p> .NET Framework Microsoft Yes CVE-2026-50527 Stack-based Buffer Overflow 11650-10816 11650-10852 11650-10853 11650-10855 11650-10378 11650-10379 11650-10483 11676-11568 11676-11569 11650-10543 11676-11572 11676-11924 11676-11923 11676-11930 11676-12097 11676-11931 11676-11571 11676-11929 11676-12098 11676-12099 11677-11568 11677-11572 11677-11571 11677-11569 11677-10853 11677-10852 11677-10816 11677-10855 11863-10379 11863-10483 11863-10543 11863-10378 12079-11929 12079-11930 12079-11923 12079-11924 12079-12097 12079-12098 12079-12099 12079-11931 12079-12389 12079-20437 12079-12243 12079-20438 12079-20854 12079-12390 12079-12242 12079-20853 20838 20839 12432 12414 12415 12433 12416 12434 2472-10379 2472-10543 2472-10378 2472-10483 21581 12459 16767 Denial of Service 11650-10816 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11650-10543 Denial of Service 11676-11572 Denial of Service 11676-11924 Denial of Service 11676-11923 Denial of Service 11676-11930 Denial of Service 11676-12097 Denial of Service 11676-11931 Denial of Service 11676-11571 Denial of Service 11676-11929 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11572 Denial of Service 11677-11571 Denial of Service 11677-11569 Denial of Service 11677-10853 Denial of Service 11677-10852 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 11863-10378 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-11931 Denial of Service 12079-12389 Denial of Service 12079-20437 Denial of Service 12079-12243 Denial of Service 12079-20438 Denial of Service 12079-20854 Denial of Service 12079-12390 Denial of Service 12079-12242 Denial of Service 12079-20853 Denial of Service 20838 Denial of Service 20839 Denial of Service 12432 Denial of Service 12414 Denial of Service 12415 Denial of Service 12433 Denial of Service 12416 Denial of Service 12434 Denial of Service 2472-10379 Denial of Service 2472-10543 Denial of Service 2472-10378 Denial of Service 2472-10483 Denial of Service 21581 Denial of Service 12459 Denial of Service 16767 Important 11650-10816 Important 11650-10852 Important 11650-10853 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11676-11568 Important 11676-11569 Important 11650-10543 Important 11676-11572 Important 11676-11924 Important 11676-11923 Important 11676-11930 Important 11676-12097 Important 11676-11931 Important 11676-11571 Important 11676-11929 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11572 Important 11677-11571 Important 11677-11569 Important 11677-10853 Important 11677-10852 Important 11677-10816 Important 11677-10855 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 11863-10378 Important 12079-11929 Important 12079-11930 Important 12079-11923 Important 12079-11924 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-11931 Important 12079-12389 Important 12079-20437 Important 12079-12243 Important 12079-20438 Important 12079-20854 Important 12079-12390 Important 12079-12242 Important 12079-20853 Important 20838 Important 20839 Important 12432 Important 12414 Important 12415 Important 12433 Important 12416 Important 12434 Important 2472-10379 Important 2472-10543 Important 2472-10378 Important 2472-10483 Important 21581 Important 12459 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21581 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10816 11650-10852 11650-10853 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10816 11650-10852 11650-10853 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11572 11676-11571 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11572 11676-11571 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11924 11676-11923 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11924 11676-11923 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11930 11676-12097 11676-11931 11676-11929 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11930 11676-12097 11676-11931 11676-11929 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11572 11677-11571 11677-11569 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11572 11677-11571 11677-11569 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10853 11677-10852 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10853 11677-10852 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10379 11863-10378 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10379 11863-10378 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-12097 12079-12098 12079-12099 12079-11931 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-12097 12079-12098 12079-12099 12079-11931 5101000 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12243 12079-12242 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12243 12079-12242 5101004 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 12079-20854 12079-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 12079-20854 12079-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12079-20854 12079-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12079-20854 12079-20853 5101002 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10379 2472-10378 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10379 2472-10378 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10543 2472-10483 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10543 2472-10483 5100985 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Levi Broderick 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> .NET Security Feature Bypass Vulnerability <p>Incorrect authorization in .NET allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>The authentication feature could be bypassed as this vulnerability allows impersonation.</p> .NET Microsoft Yes CVE-2026-50528 Incorrect Authorization Authentication Bypass by Assumed-Immutable Data Not Failing Securely ('Failing Open') 12459 20839 20838 12415 12416 12414 12432 12433 12434 16767 21581 Security Feature Bypass 12459 Security Feature Bypass 20839 Security Feature Bypass 20838 Security Feature Bypass 12415 Security Feature Bypass 12416 Security Feature Bypass 12414 Security Feature Bypass 12432 Security Feature Bypass 12433 Security Feature Bypass 12434 Security Feature Bypass 16767 Security Feature Bypass 21581 Important 12459 Important 20839 Important 20838 Important 12415 Important 12416 Important 12414 Important 12432 Important 12433 Important 12434 Important 16767 Important 21581 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12459 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 20839 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 20838 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12415 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12416 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12414 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12432 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12433 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 12434 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 16767 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 21581 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20839 20838 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12415 12416 12414 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12415 12416 12414 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes <a href="https://x.com/ky0tofu">Ky0toFu</a> Henrique Pereira with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Framework Remote Code Execution Vulnerability <p>Protection mechanism failure in .NET Framework allows an unauthorized attacker to execute code locally.</p> .NET Framework Microsoft Yes CVE-2026-50646 Protection Mechanism Failure Deserialization of Untrusted Data 11650-10378 11650-10855 11676-11569 11676-12098 11676-11931 11676-12097 11677-10855 11677-10816 11863-10483 11863-10379 12079-11930 12079-12242 12079-12389 12079-12243 12079-20854 12414 12434 21581 12459 16767 11650-10852 11650-10853 11650-10816 11650-10543 11650-10483 11650-10379 11676-11568 11676-11571 11676-11572 11676-11923 11676-11924 11676-11930 11676-11929 11676-12099 11677-11569 11677-11568 11677-11571 11677-11572 11677-10852 11677-10853 11863-10378 11863-10543 12079-11923 12079-11924 12079-11929 12079-12098 12079-12097 12079-11931 12079-12099 12079-20437 12079-20438 12079-12390 12079-20853 2472-10378 2472-10379 2472-10543 2472-10483 11676-11570 11677-11570 Remote Code Execution 11650-10378 Remote Code Execution 11650-10855 Remote Code Execution 11676-11569 Remote Code Execution 11676-12098 Remote Code Execution 11676-11931 Remote Code Execution 11676-12097 Remote Code Execution 11677-10855 Remote Code Execution 11677-10816 Remote Code Execution 11863-10483 Remote Code Execution 11863-10379 Remote Code Execution 12079-11930 Remote Code Execution 12079-12242 Remote Code Execution 12079-12389 Remote Code Execution 12079-12243 Remote Code Execution 12079-20854 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 21581 Remote Code Execution 12459 Remote Code Execution 16767 Remote Code Execution 11650-10852 Remote Code Execution 11650-10853 Remote Code Execution 11650-10816 Remote Code Execution 11650-10543 Remote Code Execution 11650-10483 Remote Code Execution 11650-10379 Remote Code Execution 11676-11568 Remote Code Execution 11676-11571 Remote Code Execution 11676-11572 Remote Code Execution 11676-11923 Remote Code Execution 11676-11924 Remote Code Execution 11676-11930 Remote Code Execution 11676-11929 Remote Code Execution 11676-12099 Remote Code Execution 11677-11569 Remote Code Execution 11677-11568 Remote Code Execution 11677-11571 Remote Code Execution 11677-11572 Remote Code Execution 11677-10852 Remote Code Execution 11677-10853 Remote Code Execution 11863-10378 Remote Code Execution 11863-10543 Remote Code Execution 12079-11923 Remote Code Execution 12079-11924 Remote Code Execution 12079-11929 Remote Code Execution 12079-12098 Remote Code Execution 12079-12097 Remote Code Execution 12079-11931 Remote Code Execution 12079-12099 Remote Code Execution 12079-20437 Remote Code Execution 12079-20438 Remote Code Execution 12079-12390 Remote Code Execution 12079-20853 Remote Code Execution 2472-10378 Remote Code Execution 2472-10379 Remote Code Execution 2472-10543 Remote Code Execution 2472-10483 Remote Code Execution 11676-11570 Remote Code Execution 11677-11570 Important 11650-10378 Important 11650-10855 Important 11676-11569 Important 11676-12098 Important 11676-11931 Important 11676-12097 Important 11677-10855 Important 11677-10816 Important 11863-10483 Important 11863-10379 Important 12079-11930 Important 12079-12242 Important 12079-12389 Important 12079-12243 Important 12079-20854 Important 12414 Important 12434 Important 21581 Important 12459 Important 16767 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10543 Important 11650-10483 Important 11650-10379 Important 11676-11568 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11930 Important 11676-11929 Important 11676-12099 Important 11677-11569 Important 11677-11568 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11863-10378 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-12098 Important 12079-12097 Important 12079-11931 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12390 Important 12079-20853 Important 2472-10378 Important 2472-10379 Important 2472-10543 Important 2472-10483 Important 11676-11570 Important 11677-11570 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11570 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11570 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10855 11650-10852 11650-10853 11650-10816 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10855 11650-10852 11650-10853 11650-10816 5101007 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11569 11676-11568 11676-11571 11676-11572 11676-11570 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11569 11676-11568 11676-11571 11676-11572 11676-11570 5101008 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-12098 11676-11931 11676-12097 11676-11930 11676-11929 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-12098 11676-11931 11676-12097 11676-11930 11676-11929 11676-12099 5101006 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10855 11677-10816 11677-10852 11677-10853 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10855 11677-10816 11677-10852 11677-10853 5099535 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10379 11863-10378 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10379 11863-10378 5100990 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11930 12079-11929 12079-12098 12079-12097 12079-11931 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11930 12079-11929 12079-12098 12079-12097 12079-11931 12079-12099 5101000 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 12079-20854 12079-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 12079-20854 12079-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12079-20854 12079-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12079-20854 12079-20853 5101002 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10543 11650-10483 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10543 11650-10483 5101011 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11569 11677-11568 11677-11571 11677-11572 11677-11570 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11569 11677-11568 11677-11571 11677-11572 11677-11570 5100989 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10543 2472-10483 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10543 2472-10483 5100985 <a href="https://x.com/ky0tofu">Ky0toFu</a> 41ae55e9310ff27fa6f26af4727e5590 <a href="https://x.com/kookiz/">Kevin Gosse</a> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Active Directory Federation Server Denial of Service Vulnerability <p>Loop with unreachable exit condition ('infinite loop') in Active Directory Federation Services (AD FS) allows an unauthorized attacker to deny service over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of availability (A:H). What does that mean for this vulnerability?</strong></p> <p>An attacker can send specially crafted packets which could affect availability of the service and result in Denial of Service (DoS).</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50647 Loop with Unreachable Exit Condition ('Infinite Loop') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12078-20853 12078-20854 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12078-20853 Denial of Service 12078-20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12078-20853 Important 12078-20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12078-20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 Anonymous 2.0 2026-07-16T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> 3.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 4.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> .NET Framework Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in .NET Framework allows an unauthorized attacker to deny service over a network.</p> .NET Framework Microsoft Yes CVE-2026-50648 Allocation of Resources Without Limits or Throttling 12415 12416 20839 12414 12433 20838 12432 12434 12459 21581 16767 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 12079-20853 12079-20854 2472-10378 2472-10379 2472-10483 2472-10543 Denial of Service 12415 Denial of Service 12416 Denial of Service 20839 Denial of Service 12414 Denial of Service 12433 Denial of Service 20838 Denial of Service 12432 Denial of Service 12434 Denial of Service 12459 Denial of Service 21581 Denial of Service 16767 Denial of Service 11650-10852 Denial of Service 11650-10853 Denial of Service 11650-10816 Denial of Service 11650-10855 Denial of Service 11650-10378 Denial of Service 11650-10379 Denial of Service 11650-10483 Denial of Service 11650-10543 Denial of Service 11676-11568 Denial of Service 11676-11569 Denial of Service 11676-11570 Denial of Service 11676-11571 Denial of Service 11676-11572 Denial of Service 11676-11923 Denial of Service 11676-11924 Denial of Service 11676-11929 Denial of Service 11676-11930 Denial of Service 11676-11931 Denial of Service 11676-12097 Denial of Service 11676-12098 Denial of Service 11676-12099 Denial of Service 11677-11568 Denial of Service 11677-11569 Denial of Service 11677-11570 Denial of Service 11677-11571 Denial of Service 11677-11572 Denial of Service 11677-10852 Denial of Service 11677-10853 Denial of Service 11677-10816 Denial of Service 11677-10855 Denial of Service 11863-10378 Denial of Service 11863-10379 Denial of Service 11863-10483 Denial of Service 11863-10543 Denial of Service 12079-11923 Denial of Service 12079-11924 Denial of Service 12079-11929 Denial of Service 12079-11930 Denial of Service 12079-11931 Denial of Service 12079-12097 Denial of Service 12079-12098 Denial of Service 12079-12099 Denial of Service 12079-20437 Denial of Service 12079-20438 Denial of Service 12079-12242 Denial of Service 12079-12243 Denial of Service 12079-12389 Denial of Service 12079-12390 Denial of Service 12079-20853 Denial of Service 12079-20854 Denial of Service 2472-10378 Denial of Service 2472-10379 Denial of Service 2472-10483 Denial of Service 2472-10543 Important 12415 Important 12416 Important 20839 Important 12414 Important 12433 Important 20838 Important 12432 Important 12434 Important 12459 Important 21581 Important 16767 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11570 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11570 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 12079-20853 Important 12079-20854 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21581 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11650-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11676-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11570 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11677-10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11863-10543 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11924 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11929 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11930 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-11931 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12097 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12098 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12099 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20438 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12242 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12243 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12389 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-12390 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12079-20854 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 2472-10543 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12415 12416 12414 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12415 12416 12414 5104032 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20839 20838 5104034 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12433 12432 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12433 12432 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11570 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11570 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 12079-20853 12079-20854 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 12079-20853 12079-20854 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12079-20853 12079-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12079-20853 12079-20854 5101002 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> .NET Remote Code Execution Vulnerability <p>Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code locally.</p> .NET Microsoft Yes CVE-2026-50649 Deserialization of Untrusted Data 12414 12434 2472-20853 12078-20853 2472-20854 12078-20854 21581 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 2472-10378 2472-10379 2472-10483 2472-10543 Remote Code Execution 12414 Remote Code Execution 12434 Remote Code Execution 2472-20853 Remote Code Execution 12078-20853 Remote Code Execution 2472-20854 Remote Code Execution 12078-20854 Remote Code Execution 21581 Remote Code Execution 11650-10852 Remote Code Execution 11650-10853 Remote Code Execution 11650-10816 Remote Code Execution 11650-10855 Remote Code Execution 11650-10378 Remote Code Execution 11650-10379 Remote Code Execution 11650-10483 Remote Code Execution 11650-10543 Remote Code Execution 11676-11568 Remote Code Execution 11676-11569 Remote Code Execution 11676-11571 Remote Code Execution 11676-11572 Remote Code Execution 11676-11923 Remote Code Execution 11676-11924 Remote Code Execution 11676-11929 Remote Code Execution 11676-11930 Remote Code Execution 11676-11931 Remote Code Execution 11676-12097 Remote Code Execution 11676-12098 Remote Code Execution 11676-12099 Remote Code Execution 11677-11568 Remote Code Execution 11677-11569 Remote Code Execution 11677-11571 Remote Code Execution 11677-11572 Remote Code Execution 11677-10852 Remote Code Execution 11677-10853 Remote Code Execution 11677-10816 Remote Code Execution 11677-10855 Remote Code Execution 11863-10378 Remote Code Execution 11863-10379 Remote Code Execution 11863-10483 Remote Code Execution 11863-10543 Remote Code Execution 12079-11923 Remote Code Execution 12079-11924 Remote Code Execution 12079-11929 Remote Code Execution 12079-11930 Remote Code Execution 12079-11931 Remote Code Execution 12079-12097 Remote Code Execution 12079-12098 Remote Code Execution 12079-12099 Remote Code Execution 12079-20437 Remote Code Execution 12079-20438 Remote Code Execution 12079-12242 Remote Code Execution 12079-12243 Remote Code Execution 12079-12389 Remote Code Execution 12079-12390 Remote Code Execution 2472-10378 Remote Code Execution 2472-10379 Remote Code Execution 2472-10483 Remote Code Execution 2472-10543 Important 12414 Important 12434 Important 2472-20853 Important 12078-20853 Important 2472-20854 Important 12078-20854 Important 21581 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12078-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12434 5104033 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 2472-20853 2472-20854 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 2472-20853 2472-20854 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20853 12078-20854 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20853 12078-20854 5101002 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 <a href="https://x.com/kookiz/">Kevin Gosse</a> 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 3.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> .NET Framework Elevation of Privilege Vulnerability <p>Improper control of generation of code ('code injection') in .NET Framework allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> .NET Framework Microsoft Yes CVE-2026-50650 Improper Control of Generation of Code ('Code Injection') 11650-10378 11650-10379 11650-10483 11650-10855 11650-10543 11676-11568 11676-11569 11676-11572 11676-11571 11676-11923 11676-11924 11676-11929 11676-11931 11676-11930 11676-12097 11676-12098 11676-12099 11650-10853 11650-10852 11677-11568 11677-11569 11677-11572 11650-10816 11677-10852 11677-11571 11677-10853 11677-10855 11677-10816 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11930 12079-12097 12079-11929 12079-12098 12079-11931 12079-12099 12079-20437 12079-12243 12079-12389 12079-20438 12079-20854 12079-12242 12079-20853 12079-12390 2472-10378 2472-10543 2472-10379 2472-10483 12414 12434 21581 12459 16767 Elevation of Privilege 11650-10378 Elevation of Privilege 11650-10379 Elevation of Privilege 11650-10483 Elevation of Privilege 11650-10855 Elevation of Privilege 11650-10543 Elevation of Privilege 11676-11568 Elevation of Privilege 11676-11569 Elevation of Privilege 11676-11572 Elevation of Privilege 11676-11571 Elevation of Privilege 11676-11923 Elevation of Privilege 11676-11924 Elevation of Privilege 11676-11929 Elevation of Privilege 11676-11931 Elevation of Privilege 11676-11930 Elevation of Privilege 11676-12097 Elevation of Privilege 11676-12098 Elevation of Privilege 11676-12099 Elevation of Privilege 11650-10853 Elevation of Privilege 11650-10852 Elevation of Privilege 11677-11568 Elevation of Privilege 11677-11569 Elevation of Privilege 11677-11572 Elevation of Privilege 11650-10816 Elevation of Privilege 11677-10852 Elevation of Privilege 11677-11571 Elevation of Privilege 11677-10853 Elevation of Privilege 11677-10855 Elevation of Privilege 11677-10816 Elevation of Privilege 11863-10378 Elevation of Privilege 11863-10379 Elevation of Privilege 11863-10483 Elevation of Privilege 11863-10543 Elevation of Privilege 12079-11923 Elevation of Privilege 12079-11924 Elevation of Privilege 12079-11930 Elevation of Privilege 12079-12097 Elevation of Privilege 12079-11929 Elevation of Privilege 12079-12098 Elevation of Privilege 12079-11931 Elevation of Privilege 12079-12099 Elevation of Privilege 12079-20437 Elevation of Privilege 12079-12243 Elevation of Privilege 12079-12389 Elevation of Privilege 12079-20438 Elevation of Privilege 12079-20854 Elevation of Privilege 12079-12242 Elevation of Privilege 12079-20853 Elevation of Privilege 12079-12390 Elevation of Privilege 2472-10378 Elevation of Privilege 2472-10543 Elevation of Privilege 2472-10379 Elevation of Privilege 2472-10483 Elevation of Privilege 12414 Elevation of Privilege 12434 Elevation of Privilege 21581 Elevation of Privilege 12459 Elevation of Privilege 16767 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10855 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11572 Important 11676-11571 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11931 Important 11676-11930 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11650-10853 Important 11650-10852 Important 11677-11568 Important 11677-11569 Important 11677-11572 Important 11650-10816 Important 11677-10852 Important 11677-11571 Important 11677-10853 Important 11677-10855 Important 11677-10816 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11930 Important 12079-12097 Important 12079-11929 Important 12079-12098 Important 12079-11931 Important 12079-12099 Important 12079-20437 Important 12079-12243 Important 12079-12389 Important 12079-20438 Important 12079-20854 Important 12079-12242 Important 12079-20853 Important 12079-12390 Important 2472-10378 Important 2472-10543 Important 2472-10379 Important 2472-10483 Important 12414 Important 12434 Important 21581 Important 12459 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11676-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11650-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11677-10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11863-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11924 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12243 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12242 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12079-12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10543 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 2472-10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12414 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12434 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10855 11650-10853 11650-10852 11650-10816 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10855 11650-10853 11650-10852 11650-10816 5101007 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11572 11676-11571 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11572 11676-11571 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11931 11676-11930 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11931 11676-11930 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11572 11677-11571 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11572 11677-11571 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10855 11677-10816 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10855 11677-10816 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11930 12079-12097 12079-11929 12079-12098 12079-11931 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11930 12079-12097 12079-11929 12079-12098 12079-11931 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12243 12079-12242 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12243 12079-12242 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 12079-20854 12079-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 12079-20854 12079-20853 5101014 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12079-20854 12079-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12079-20854 12079-20853 5101002 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10543 2472-10483 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10543 2472-10483 5100985 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> .NET Denial of Service Vulnerability <p>Allocation of resources without limits or throttling in .NET allows an unauthorized attacker to deny service over a network.</p> .NET Microsoft Yes CVE-2026-50651 Allocation of Resources Without Limits or Throttling 20838 20839 12459 12414 12416 12415 12432 12433 16767 12434 21581 Denial of Service 20838 Denial of Service 20839 Denial of Service 12459 Denial of Service 12414 Denial of Service 12416 Denial of Service 12415 Denial of Service 12432 Denial of Service 12433 Denial of Service 16767 Denial of Service 12434 Denial of Service 21581 Important 20838 Important 20839 Important 12459 Important 12414 Important 12416 Important 12415 Important 12432 Important 12433 Important 16767 Important 12434 Important 21581 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12459 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 16767 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21581 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20838 20839 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20838 20839 5104034 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12416 12415 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12416 12415 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Miha Zupan with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally.</p> <p>For example, when the score indicates that the <strong>Attack Vector</strong> is <strong>Local</strong> and <strong>User Interaction</strong> is <strong>Required</strong>, this could describe an exploit in which an attacker, through social engineering, convinces a victim to download and open a specially crafted file from a website which leads to a local attack on their computer.</p> Windows Media Microsoft Yes CVE-2026-50655 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 haowei yan &amp; xiaozun tang <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability <p>Exposure of private personal information to an unauthorized actor in Microsoft Defender allows an authorized attacker to disclose information locally.</p> Microsoft Defender Microsoft Yes CVE-2026-50657 Exposure of Private Personal Information to an Unauthorized Actor 12014 Information Disclosure 12014 Important 12014 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.7 4.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12014 Release Notes https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide 12014 Maybe Security Update 101.26042.0020 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide 12014 Release Notes <a href="https://spaceraccoon.dev/">Eugene Lim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Microsoft Defender allows an authorized attacker to elevate privileges locally.</p> Microsoft Defender Microsoft Yes CVE-2026-50658 Time-of-check Time-of-use (TOCTOU) Race Condition 12014 Elevation of Privilege 12014 Important 12014 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12014 Release Notes https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide 12014 Maybe Security Update 101.26042.0020 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide 12014 Release Notes <a href="https://spaceraccoon.dev/">Eugene Lim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Spoofing Vulnerability <p>Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.</p> .NET Microsoft Yes CVE-2026-50659 Improper Encoding or Escaping of Output 12459 20839 20838 12414 12415 12416 12432 16767 12433 12434 11650-10852 11650-10853 11650-10816 11650-10855 11650-10378 11650-10379 11650-10483 11650-10543 11676-11568 11676-11569 11676-11571 11676-11572 11676-11923 11676-11924 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 11677-11568 11677-11569 11677-11571 11677-11572 11677-10852 11677-10853 11677-10816 11677-10855 11863-10378 11863-10379 11863-10483 11863-10543 12079-11923 12079-11924 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 12079-20437 12079-20438 12079-12242 12079-12243 12079-12389 12079-12390 2472-10378 2472-10379 2472-10483 2472-10543 12078-20854 2472-20854 21581 2472-20853 12078-20853 Spoofing 12459 Spoofing 20839 Spoofing 20838 Spoofing 12414 Spoofing 12415 Spoofing 12416 Spoofing 12432 Spoofing 16767 Spoofing 12433 Spoofing 12434 Spoofing 11650-10852 Spoofing 11650-10853 Spoofing 11650-10816 Spoofing 11650-10855 Spoofing 11650-10378 Spoofing 11650-10379 Spoofing 11650-10483 Spoofing 11650-10543 Spoofing 11676-11568 Spoofing 11676-11569 Spoofing 11676-11571 Spoofing 11676-11572 Spoofing 11676-11923 Spoofing 11676-11924 Spoofing 11676-11929 Spoofing 11676-11930 Spoofing 11676-11931 Spoofing 11676-12097 Spoofing 11676-12098 Spoofing 11676-12099 Spoofing 11677-11568 Spoofing 11677-11569 Spoofing 11677-11571 Spoofing 11677-11572 Spoofing 11677-10852 Spoofing 11677-10853 Spoofing 11677-10816 Spoofing 11677-10855 Spoofing 11863-10378 Spoofing 11863-10379 Spoofing 11863-10483 Spoofing 11863-10543 Spoofing 12079-11923 Spoofing 12079-11924 Spoofing 12079-11929 Spoofing 12079-11930 Spoofing 12079-11931 Spoofing 12079-12097 Spoofing 12079-12098 Spoofing 12079-12099 Spoofing 12079-20437 Spoofing 12079-20438 Spoofing 12079-12242 Spoofing 12079-12243 Spoofing 12079-12389 Spoofing 12079-12390 Spoofing 2472-10378 Spoofing 2472-10379 Spoofing 2472-10483 Spoofing 2472-10543 Spoofing 12078-20854 Spoofing 2472-20854 Spoofing 21581 Spoofing 2472-20853 Spoofing 12078-20853 Important 12459 Important 20839 Important 20838 Important 12414 Important 12415 Important 12416 Important 12432 Important 16767 Important 12433 Important 12434 Important 11650-10852 Important 11650-10853 Important 11650-10816 Important 11650-10855 Important 11650-10378 Important 11650-10379 Important 11650-10483 Important 11650-10543 Important 11676-11568 Important 11676-11569 Important 11676-11571 Important 11676-11572 Important 11676-11923 Important 11676-11924 Important 11676-11929 Important 11676-11930 Important 11676-11931 Important 11676-12097 Important 11676-12098 Important 11676-12099 Important 11677-11568 Important 11677-11569 Important 11677-11571 Important 11677-11572 Important 11677-10852 Important 11677-10853 Important 11677-10816 Important 11677-10855 Important 11863-10378 Important 11863-10379 Important 11863-10483 Important 11863-10543 Important 12079-11923 Important 12079-11924 Important 12079-11929 Important 12079-11930 Important 12079-11931 Important 12079-12097 Important 12079-12098 Important 12079-12099 Important 12079-20437 Important 12079-20438 Important 12079-12242 Important 12079-12243 Important 12079-12389 Important 12079-12390 Important 2472-10378 Important 2472-10379 Important 2472-10483 Important 2472-10543 Important 12078-20854 Important 2472-20854 Important 21581 Important 2472-20853 Important 12078-20853 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12459 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20839 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 20838 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12414 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12415 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12416 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12432 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 16767 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12433 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12434 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11650-10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11676-12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11677-10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11863-10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11863-10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11863-10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 11863-10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-11924 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12242 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12243 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12079-12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-10543 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12078-20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 21581 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 2472-20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12078-20853 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20839 20838 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes 5101007 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101007 11650-10852 11650-10853 11650-10816 11650-10855 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101007 11650-10852 11650-10853 11650-10816 11650-10855 5101007 5101009 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101009 11650-10378 11650-10379 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101009 11650-10378 11650-10379 5101009 5101011 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101011 11650-10483 11650-10543 Maybe Security Update 4.8.4803.0 https://support.microsoft.com/help/5101011 11650-10483 11650-10543 5101011 5101008 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101008 11676-11568 11676-11569 11676-11571 11676-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.8.4803.0 https://support.microsoft.com/help/5101008 11676-11568 11676-11569 11676-11571 11676-11572 5101008 5101010 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101010 11676-11923 11676-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101010 11676-11923 11676-11924 5101010 5101006 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.4803.0 https://support.microsoft.com/help/5101006 11676-11929 11676-11930 11676-11931 11676-12097 11676-12098 11676-12099 5101006 5100989 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100989 11677-11568 11677-11569 11677-11571 11677-11572 Maybe Security Update 2.0.50727.9069 & 3.0.30729.9067 & 4.7.4143.0 https://support.microsoft.com/help/5100989 11677-11568 11677-11569 11677-11571 11677-11572 5100989 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 11677-10852 11677-10853 11677-10816 11677-10855 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 & 4.7.4143.0 https://support.microsoft.com/help/5099535 11677-10852 11677-10853 11677-10816 11677-10855 5099535 5100990 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100990 11863-10378 11863-10379 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100990 11863-10378 11863-10379 5100990 5100991 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100991 11863-10483 11863-10543 Maybe Security Update 4.7.4143.0 https://support.microsoft.com/help/5100991 11863-10483 11863-10543 5100991 5101005 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101005 12079-11923 12079-11924 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101005 12079-11923 12079-11924 5101005 5101000 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101000 12079-11929 12079-11930 12079-11931 12079-12097 12079-12098 12079-12099 5101000 5100998 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100998 12079-20437 12079-20438 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9340.0 https://support.microsoft.com/help/5100998 12079-20437 12079-20438 5100998 5101004 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101004 12079-12242 12079-12243 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101004 12079-12242 12079-12243 5101004 5101001 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101001 12079-12389 12079-12390 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 & 4.8.9339.0 https://support.microsoft.com/help/5101001 12079-12389 12079-12390 5101001 5100984 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100984 2472-10378 2472-10379 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100984 2472-10378 2472-10379 5100984 5100985 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5100985 2472-10483 2472-10543 Maybe Security Update 2.0.50727.8983 & 3.0.30729.8978 https://support.microsoft.com/help/5100985 2472-10483 2472-10543 5100985 5101002 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101002 12078-20854 12078-20853 Maybe Security Update 4.8.9340.0 https://support.microsoft.com/help/5101002 12078-20854 12078-20853 5101002 5101014 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101014 2472-20854 2472-20853 Maybe Security Update 2.0.50727.9182 & 3.0.30729.9168 https://support.microsoft.com/help/5101014 2472-20854 2472-20853 5101014 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes hamayanhamayan 1.0 2026-07-14T07:00:00 <p>Information published.</p> 2.0 2026-07-20T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> 3.0 2026-07-21T07:00:00 <p>Updated product information in the Software Update table. This is an informational change only.</p> Windows BitLocker Security Feature Bypass Vulnerability <p>Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>A successful attacker could bypass the BitLocker Device Encryption feature on the system storage device. An attacker with physical access to the target could exploit this vulnerability to gain access to encrypted data.</p> Windows BitLocker Microsoft Yes CVE-2026-50661 Protection Mechanism Failure 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:Yes;Exploited:No;Latest Software Release:Exploitation Less Likely 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10852 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10853 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.1 5.3 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Access Elevation of Privilege Vulnerability <p>Use after free in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access Connection Manager Microsoft Yes CVE-2026-50666 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Common Log File System Driver Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-50667 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to elevate privileges with a physical attack.</p> <p><strong>According to the CVSS metric, the attack vector is physical (AV:P). What does that mean for this vulnerability?</strong></p> <p>An attacker with physical access to a vulnerable system could insert a specially crafted USB device.</p> <p><strong>Are there additional attack vectors?</strong></p> <p>This vulnerability could also be exploited through a local attack vector. An attacker authenticated as an administrator on a vulnerable system could mount a specially crafted virtual hard drive (VHD) to exploit the system. This scenario results in a lower CVSS score which is why the primary attack vector is listed as Physical in our documentation.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-50668 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Thanatos Tian &amp; wgg &amp; @2st__ with Diffract <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Telephony Server Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Telephony Service Microsoft Yes CVE-2026-50669 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.z1r0.top/">z1r0</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50670 Out-of-bounds Read Heap-based Buffer Overflow Improper Input Validation 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Use after free in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition and also to take additional actions prior to exploitation to prepare the target environment.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-50672 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Null pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50673 NULL Pointer Dereference Time-of-check Time-of-use (TOCTOU) Race Condition 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 5n1p3r0010 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Print Driver Elevation of Privilege Vulnerability <p>Use after free in Windows USB Print Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain kernel memory content.</p> Windows USB Print Driver Microsoft Yes CVE-2026-50674 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Media allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-50676 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Elevation of Privilege Vulnerability <p>Use after free in Windows Media allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Media Microsoft Yes CVE-2026-50677 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Message Queuing (MSMQ) Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Active Directory allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> Windows Active Directory Microsoft Yes CVE-2026-54115 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Active Directory Federation Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Active Directory Federation Services (AD FS) allows an authorized attacker to perform spoofing over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-50684 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Spoofing 11568 Spoofing 11569 Spoofing 11571 Spoofing 11572 Spoofing 11923 Spoofing 12437 Spoofing 12436 Spoofing 10852 Spoofing 10853 Spoofing 10816 Spoofing 10855 Spoofing 10378 Spoofing 10379 Spoofing 10483 Spoofing 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11568 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11569 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11571 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11572 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11923 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 12437 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 12436 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10852 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10853 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10816 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10855 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10378 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10379 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10483 4.8 4.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Search Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could use this vulnerability to elevate privileges from Medium Integrity Level to a High Integrity Level.</p> Microsoft Windows Search Component Microsoft Yes CVE-2026-50679 Heap-based Buffer Overflow 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous haowei yan <a href="https://x.com/h4urek">h4urek</a> with <a href="https://secsys.fudan.edu.cn/">secsys lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50688 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Kentaro Kawane with GMO Cybersecurity by Ierae, Inc. 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Hyper-V Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Hyper-V Microsoft Yes CVE-2026-50680 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.2 7.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Artur Stetsko 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Secure Channel Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Cryptographic Services allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is internal memory pointers. These leaked addresses could help an attacker bypass security protection and facilitate further exploitation.</p> Windows Cryptographic Services Microsoft Yes CVE-2026-50681 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Active Directory Certificate Services Elevation of Privilege Vulnerability <p>Improper authorization in Active Directory Certificate Services (AD CS) allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain administrator privileges.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could manipulate attributes associated with a machine account and obtain a certificate from Active Directory Certificate Services that allows authentication as that machine via PKINIT. If a Domain Controller account can be targeted, the attacker could authenticate as the Domain Controller and gain the ability to perform privileged Active Directory operations.</p> Active Directory Certificate Services (AD CS) Microsoft Yes CVE-2026-54121 Improper Authorization 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/aniqfakhrul">Aniq Fakhrul</a> <a href="https://x.com/h0j3n">Muhammad Ali</a> <a href="https://x.com/aniqfakhrul">Aniq Fakhrul</a> <a href="https://x.com/aniqfakhrul">Aniq Fakhrul</a> <a href="https://x.com/h0j3n">Muhammad Ali</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Active Directory Denial of Service Vulnerability <p>Out-of-bounds read in Windows Active Directory allows an authorized attacker to deny service over a network.</p> Windows Active Directory Microsoft Yes CVE-2026-50682 Out-of-bounds Read 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11923 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11929 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11930 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11931 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12097 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12098 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12099 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12437 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 20437 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 20438 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12389 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12390 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12436 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 WARP and ACS teams at Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DHCP Server Remote Code Execution Vulnerability <p>Double free in Windows DHCP Server allows an authorized attacker to execute code over a network.</p> Windows DHCP Server Microsoft Yes CVE-2026-50685 Double Free 11568 11569 11571 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11923 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 WARP and ACS teams at Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DHCP Client Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an authorized attacker to elevate privileges over an adjacent network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows DHCP Server Microsoft Yes CVE-2026-50683 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.0 7.0 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 WARP and ACS teams at Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-50687 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows OLE Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows OLE allows an unauthorized attacker to execute code over a network.</p> Windows OLE Microsoft Yes CVE-2026-50686 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Hamza Nauman with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Clipboard Server Elevation of Privilege Vulnerability <p>Use after free in Windows Clipboard Server allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Clipboard Server Microsoft Yes CVE-2026-50689 Use After Free Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Hamza Nauman with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Runtime Microsoft Yes CVE-2026-54125 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Arpit Gupta 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows SMB allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is unauthorized file system access - reading from the file system.</p> Windows SMB Microsoft Yes CVE-2026-50690 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Desktop Window Manager Microsoft Yes CVE-2026-50692 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DHCP Client Remote Code Execution Vulnerability <p>Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally.</p> Windows DHCP Client Microsoft Yes CVE-2026-54128 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Owen McCullough with MSRC V&amp;M 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required are none (PR:N). What does that mean for this vulnerability?</strong></p> <p>An unauthorized attacker must wait for a user to initiate a connection.</p> Windows RDP Microsoft Yes CVE-2026-54126 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Minecraft Bedrock Dedicated Server Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Minecraft Bedrock Dedicated Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>Why are there no links to an update or instructions with steps that must be taken to protect from this vulnerability?</strong></p> <p>This vulnerability has already been fully mitigated by Microsoft. There is no action for users of this service to take. The purpose of this CVE is to provide further transparency.</p> <p>Please see <a href="https://aka.ms/MSRC-Cloud-CVEs">Toward greater transparency: Unveiling Cloud Service CVEs</a> for more information.</p> Minecraft Bedrock Dedicated Server Microsoft No CVE-2026-55010 Heap-based Buffer Overflow 21464 Remote Code Execution 21464 Critical 21464 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21464 Ming-Shiang Tzou (ConsoleBreak) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-47290 Use After Free 11573 11574 11762 11763 11952 11953 12420 12421 10753 10754 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10753 Remote Code Execution 10754 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002273 https://www.microsoft.com/en-us/download/details.aspx?id=108731 5002112 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002273 10753 10754 5002273 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-47642 Use After Free 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Haifei Li with <a href="https://pub.expmon.com/">EXPMON</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-48580 Untrusted Pointer Dereference 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-50301 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10753 10754 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10753 Remote Code Execution 10754 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Jeongmin Choi(https://x.com/lmksecurity) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-50314 Use After Free 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-50467 Use After Free 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55017 Heap-based Buffer Overflow 11573 11574 11762 11763 11952 11953 12420 12421 10753 10754 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10753 Remote Code Execution 10754 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 12420 Important 12421 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002273 https://www.microsoft.com/en-us/download/details.aspx?id=108731 5002112 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002273 10753 10754 5002273 Quan Jin with DBAPPSecurity WeBin Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55016 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55024 Access of Resource Using Incompatible Type ('Type Confusion') 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-50408 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/dnpushme">f4 &amp; Zhiniang Peng with HUST</a> 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55019 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 41ae55e9310ff27fa6f26af4727e5590 P1hcn 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55018 Use After Free 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the local memory address.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55046 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Information Disclosure 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55020 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 Kn1ght Kn1ght 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55021 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 P1hcn 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Microsoft Yes CVE-2026-55022 Access of Resource Using Incompatible Type ('Type Confusion') 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is the local memory address.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Microsoft Yes CVE-2026-55023 Out-of-bounds Read 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee HangAn 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55025 Access of Resource Using Incompatible Type ('Type Confusion') 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55030 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 P1hcn 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55125 Heap-based Buffer Overflow 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55031 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55026 Integer Overflow or Wraparound 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55048 Integer Overflow or Wraparound Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55034 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 P1hcn 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55027 Out-of-bounds Read 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55029 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55028 Out-of-bounds Read 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office Microsoft Yes CVE-2026-55047 Out-of-bounds Read 21368 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 Information Disclosure 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Important 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Haein Lee 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55039 Integer Underflow (Wrap or Wraparound) Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55045 Out-of-bounds Read 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 10950 Critical 11585 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 11961 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 8.4 7.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-55050 Out-of-bounds Read 21368 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 Information Disclosure 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10746 Information Disclosure 10747 Important 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 0ccbbf129444eb66344ccafb92b00df4 <a href="https://s2w.inc/ko">Jeongmin Choi with S2W</a> Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55049 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002748 https://www.microsoft.com/en-us/download/details.aspx?id=108734 5002616 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002748 10753 10754 5002748 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 Jeongmin Choi with S2W haowei yan &amp; xiaozun tang 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-55032 Use After Free 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haifei Li with <a href="https://pub.expmon.com/">EXPMON</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-55033 Integer Overflow or Wraparound Heap-based Buffer Overflow 11585 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 10950 11961 21368 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 10950 Remote Code Execution 11961 Remote Code Execution 21368 Critical 11585 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10746 Critical 10747 Critical 10950 Critical 11961 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes kunlun Lab & GLM <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> <a href="https://www.linkedin.com/in/haaeein">Haein Lee</a> with KAIST Hacking Lab Anonymous kunlun Lab & GLM 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55041 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab yhw &amp; txz <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55138 Untrusted Pointer Dereference 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/dnpushme">f4 &amp; Zhiniang Peng with HUST</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Information Disclosure Vulnerability <p>Improper validation of specified type of input in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-55124 Improper Validation of Specified Type of Input Improper Input Validation 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office Word Microsoft Yes CVE-2026-55127 Heap-based Buffer Overflow 11585 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10746 10747 11961 21368 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 11961 Remote Code Execution 21368 Remote Code Execution 10950 Critical 11585 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10746 Critical 10747 Critical 11961 Critical 21368 Critical 10950 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55136 Untrusted Pointer Dereference 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55141 Stack-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55129 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab txz and yhw 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55035 Out-of-bounds Read 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55036 Buffer Over-read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55044 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-55055 Stack-based Buffer Overflow 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55054 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Information Disclosure 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10836 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10739 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10740 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55037 Heap-based Buffer Overflow 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55058 Out-of-bounds Read 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Word Microsoft Yes CVE-2026-55038 Stack-based Buffer Overflow 21368 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 Remote Code Execution 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Important 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Double free in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-55132 Double Free 21368 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 Remote Code Execution 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Critical 21368 Critical 10950 Critical 11585 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 11961 Critical 12420 Critical 12421 Critical 12440 Critical 10746 Critical 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55137 Heap-based Buffer Overflow 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55053 Heap-based Buffer Overflow 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55122 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Information Disclosure 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 21368 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10836 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11573 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11574 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11762 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11763 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11951 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11952 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11953 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12420 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12421 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12440 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10739 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55057 Integer Overflow or Wraparound 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55131 Heap-based Buffer Overflow 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55126 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 7.3 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 Vladislav Berghici of TrendAI Research 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Information Disclosure Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55051 Server-Side Request Forgery (SSRF) 10950 11585 11961 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 P1hcn Kn1ght 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Word Microsoft Yes CVE-2026-55134 Stack-based Buffer Overflow 21368 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 Remote Code Execution 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Important 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55056 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Haein Lee with KAIST Hacking Lab <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Security Feature Bypass Vulnerability <p>Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>The authentication feature could be bypassed as this vulnerability allows impersonation.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), but could lead to no loss of availability (A:N). What does that mean for this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow an attacker to disclose files and modify data, but the attacker cannot impact the availability of the system.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>In a network-based attack, an unauthenticated attacker could bypass authentication and make an anonymous connection.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55040 Weak Authentication 10950 11585 11961 Security Feature Bypass 10950 Security Feature Bypass 11585 Security Feature Bypass 11961 Critical 10950 Critical 11585 Critical 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10950 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11585 9.1 7.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 <a href="https://x.com/rm_rf_chumy">Chumy Tsai</a> with <a href="https://www.cycraft.com/">CyCraft Technology</a> <a href="https://twitter.com/_l0gg">khoadha</a> <a href="https://x.com/stephenfewer">Stephen Fewer</a> with <a href="https://www.rapid7.com/">Rapid7</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Information Disclosure Vulnerability <p>Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office Word Microsoft Yes CVE-2026-55142 Numeric Truncation Error 21368 10950 11585 11573 11574 11762 11763 11952 11953 11961 12420 12421 10746 10747 Information Disclosure 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 10746 Information Disclosure 10747 Important 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10746 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10747 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> Microsoft Office Microsoft Yes CVE-2026-55140 Heap-based Buffer Overflow 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10753 Remote Code Execution 10754 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10753 Critical 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002748 https://www.microsoft.com/en-us/download/details.aspx?id=108734 5002616 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002748 10753 10754 5002748 5002830 https://www.microsoft.com/en-us/download/details.aspx?id=108725 5002818 10753 10754 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002830 10753 10754 5002830 kunlun Lab & GLM yhw &amp; txz kunlun Lab & GLM 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> Microsoft Office Word Microsoft Yes CVE-2026-55128 Use After Free 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10746 10747 21368 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10746 Remote Code Execution 10747 Remote Code Execution 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10746 Important 10747 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Word Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.</p> Microsoft Office Word Microsoft Yes CVE-2026-55130 Heap-based Buffer Overflow 10950 11585 11573 11574 11762 11763 11952 11953 11961 12420 12421 10746 10747 Remote Code Execution 10950 Remote Code Execution 11585 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 11961 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 10746 Remote Code Execution 10747 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 10746 Important 10747 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10746 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10747 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002890 https://www.microsoft.com/en-us/download/details.aspx?id=108735 5002879 10746 10747 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002890 10746 10747 5002890 Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55042 Use of Uninitialized Resource 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 Information Disclosure 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Important 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55139 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes oriotie 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft PowerPoint Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-55043 Heap-based Buffer Overflow Integer Overflow or Wraparound 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10741 10742 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10741 Remote Code Execution 10742 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10741 Critical 10742 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10741 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10742 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002867 https://www.microsoft.com/en-us/download/details.aspx?id=108732 5002808 10741 10742 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002867 10741 10742 5002867 0ccbbf129444eb66344ccafb92b00df4 Haein Lee with KAIST Hacking Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft OneNote Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office OneNote allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office OneNote Microsoft Yes CVE-2026-55133 Heap-based Buffer Overflow 11762 11763 21368 11951 12440 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 21368 Remote Code Execution 11951 Remote Code Execution 12440 Important 11762 Important 11763 Important 21368 Important 11951 Important 12440 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 Click to Run 11762 11763 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 Click to Run Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft PowerPoint Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-55123 Heap-based Buffer Overflow Incorrect Conversion between Numeric Types 21368 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10741 10742 Remote Code Execution 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10741 Remote Code Execution 10742 Critical 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10741 Critical 10742 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10741 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10742 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002867 https://www.microsoft.com/en-us/download/details.aspx?id=108732 5002808 10741 10742 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002867 10741 10742 5002867 yhw &amp; txz 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft PowerPoint Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> Microsoft Office PowerPoint Microsoft Yes CVE-2026-55120 Heap-based Buffer Overflow 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10741 10742 21368 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10741 Remote Code Execution 10742 Remote Code Execution 21368 Critical 11573 Critical 11574 Critical 11762 Critical 11763 Critical 11951 Critical 11952 Critical 11953 Critical 12420 Critical 12421 Critical 12440 Critical 10741 Critical 10742 Critical 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10741 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10742 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002867 https://www.microsoft.com/en-us/download/details.aspx?id=108732 5002808 10741 10742 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002867 10741 10742 5002867 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Elevation of Privilege Vulnerability <p>Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55052 Missing Authorization 10950 11585 11961 Elevation of Privilege 10950 Elevation of Privilege 11585 Elevation of Privilege 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 odgrso 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-55135 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p>Buffer over-read in SQL Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-50468 Buffer Over-read 21563 20748 Information Disclosure 21563 Information Disclosure 20748 Important 21563 Important 20748 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21563 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20748 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 Pwnforr777 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SQL Server Information Disclosure Vulnerability <p>Access of resource using incompatible type ('type confusion') in SQL Server allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is internal memory pointers. These leaked addresses could help an attacker bypass security protection and facilitate further exploitation.</p> <p><strong>I am running SQL Server on my system. What action do I need to take?</strong></p> <p>Update your relevant version of SQL Server. Any applicable driver fixes are included in those updates.</p> <p><strong>There are GDR and/or CU (Cumulative Update) updates offered for my version of SQL Server. How do I know which update to use?</strong></p> <ul> <li>First, determine your SQL Server version number. For more information on determining your SQL Server version number, see <a href="https://learn.microsoft.com/en-us/troubleshoot/sql/releases/download-and-install-latest-updates">Microsoft Knowledge Base Article 321185</a> - How to determine the version, edition, and update level of SQL Server and its components.</li> <li>Second, in the following table, locate your version number or the version range that your version number falls within. The corresponding update is the one you need to install.</li> </ul> <p><strong>Note</strong> If your SQL Server version number is not represented in the table below, your SQL Server version is no longer supported. Please upgrade to the latest Service Pack or SQL Server product to apply this and future security updates.</p> <table> <thead> <tr> <th>Update Number</th> <th>Title</th> <th>Version</th> <th>Apply if current product version is…</th> <th>This security update also includes servicing releases up through…</th> </tr> </thead> <tbody> <tr> <td><strong>5101346</strong></td> <td>Security update for SQL Server 2025 CU6+GDR</td> <td>17.0.4060.2</td> <td>17.0.4006.2 - 17.0.4055.5</td> <td>KB5093421 - Previous SQL2025 RTM CU6</td> </tr> <tr> <td><strong>5102333</strong></td> <td>Security update for SQL Server 2025 RTM+GDR</td> <td>17.0.1125.2</td> <td>17.0.1000.7 - 17.0.1115.1</td> <td>KB5091223 - Previous SQL2025 RTM GDR</td> </tr> <tr> <td><strong>5101347</strong></td> <td>Security update for SQL Server 2022 CU25+GDR</td> <td>16.0.4262.2</td> <td>16.0.4003.1 - 16.0.4255.1</td> <td>KB5081477 - Previous SQL2022 RTM CU25</td> </tr> <tr> <td><strong>5102334</strong></td> <td>Security update for SQL Server 2022 RTM+GDR</td> <td>16.0.1190.2</td> <td>16.0.1000.6 - 16.0.1180.1</td> <td>KB5091158 - Previous SQL2022 RTM GDR</td> </tr> <tr> <td><strong>5102335</strong></td> <td>Security update for SQL Server 2019 CU32+GDR</td> <td>15.0.4480.2</td> <td>15.0.4003.23 - 15.0.4470.1</td> <td>KB5090407 - Previous SQL2019 RTM CU32 GDR</td> </tr> <tr> <td><strong>5102336</strong></td> <td>Security update for SQL Server 2019 RTM+GDR</td> <td>15.0.2180.2</td> <td>15.0.2000.5 - 15.0.2170.1</td> <td>KB 5090408 - Previous SQL2019 RTM GDR</td> </tr> <tr> <td><strong>5102337</strong></td> <td>Security update for SQL Server 2017 CU31+GDR</td> <td>14.0.3540.1</td> <td>14.0.3006.16 - 14.0.3530.2</td> <td>KB 5090354 - Previous SQL2017 RTM CU31 GDR</td> </tr> <tr> <td><strong>5102338</strong></td> <td>Security update for SQL Server 2017 RTM+GDR</td> <td>14.0.2120.1</td> <td>14.0.1000.169 - 14.0.2110.2</td> <td>KB 5090347 - Previous SQL2017 RTM GDR</td> </tr> <tr> <td><strong>5102339</strong></td> <td>Security update for SQL Server 2016 Azure Connect Feature Pack+GDR</td> <td>13.0.7095.1</td> <td>13.0.7000.253 - 13.0.7085.1</td> <td>KB 5089270 - Previous SQL2016 Azure Connect Feature Pack GDR</td> </tr> <tr> <td><strong>5102340</strong></td> <td>Security update for SQL Server 2016 SP3+GDR</td> <td>13.0.6500.1</td> <td>13.0.6300.2 - 13.0.6490.1</td> <td>KB 5089271 - Previous SQL2016 RTM GDR</td> </tr> </tbody> </table> <p><strong>What are the GDR and CU update designations and how do they differ?</strong></p> <p>The General Distribution Release (GDR) and Cumulative Update (CU) designations correspond to the two different servicing options in place for SQL Server baseline releases. A baseline can be either an RTM release or a Service Pack release.</p> <ul> <li>GDR updates – cumulatively only contain security updates for the given baseline.</li> <li>CU updates – cumulatively contain all functional fixes and security updates for the given baseline.</li> </ul> <p>For any given baseline, either the GDR or CU updates could be options (see below).</p> <ul> <li>If SQL Server installation is at a baseline version, you can choose either the GDR or CU update.</li> <li>If SQL Server installation has intentionally only installed past GDR updates, then choose to install the GDR update package.</li> <li>If SQL Server installation has intentionally installed previous CU updates, then choose to install the CU security update package.</li> </ul> <p><strong>Note:</strong> You are allowed to make a change from GDR updates to CU updates ONE TIME. Once a SQL Server CU update is applied to a SQL Server installation, there is NO way to go back to the GDR update path.</p> <p><strong>Can the security updates be applied to SQL Server instances on Windows Azure (IaaS)?</strong></p> <p>Yes. SQL Server instances on Windows Azure (IaaS) can be offered the security updates through Microsoft Update, or customers can download the security updates from Microsoft Download Center and apply them manually.</p> SQL Server Microsoft Yes CVE-2026-54116 Access of Resource Using Incompatible Type ('Type Confusion') 20748 21563 Information Disclosure 20748 Information Disclosure 21563 Important 20748 Important 21563 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20748 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21563 5102333 https://www.microsoft.com/download/details.aspx?familyid=6a71f56f-474c-4c05-a420-f30ae538ebe7 20748 Maybe Security Update 17.0.1125.2 https://support.microsoft.com/help/5102333 20748 5102333 5102333 https://support.microsoft.com/help/5102333 20748 5101346 https://www.microsoft.com/download/details.aspx?familyid=8cbfc62d-9944-42ba-aac6-0c5fa9dae68e 21563 Maybe Security Update 17.0.4060.2 https://support.microsoft.com/help/5101346 21563 5101346 5101346 https://support.microsoft.com/help/5101346 21563 Pwnforr777 1.0 2026-07-14T07:00:00 <p>Information published.</p> Outlook Copilot Tampering Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Outlook Copilot allows an authorized attacker to perform tampering over a network.</p> <p><strong>How do I protect myself from this vulnerability?</strong></p> <p>Customers can help protect themselves by enabling Outlook's external sender tagging feature to identify untrusted content. This enables Microsoft's provided mitigations to isolate and safely process the untrusted content before it is provided to Microsoft 365 Copilot. Administrators can enable external sender tagging through Exchange Online PowerShell. Refer to the Microsoft Learn documentation for setup instructions and requirements.</p> <ul> <li><p><a href="https://learn.microsoft.com/en-us/powershell/exchange/exchange-online-powershell-v2?view=exchange-ps#install-the-exchange-online-powershell-module">Install the Exchange Online PowerShell Module</a></p> </li> <li><p><a href="https://learn.microsoft.com/en-us/powershell/exchange/connect-to-exchange-online-powershell?view=exchange-ps">Connect to Exchange Online PowerShell</a></p> </li> <li><p><a href="https://learn.microsoft.com/en-us/powershell/module/exchangepowershell/set-externalinoutlook?view=exchange-ps">Set-ExternalInOutlook</a></p> </li> </ul> Outlook Copilot Microsoft Yes CVE-2026-55145 Improper Neutralization of Special Elements used in a Command ('Command Injection') 21063 Tampering 21063 Moderate 21063 Publicly Disclosed:No;Exploited:No;Latest Software Release:N/A 6.3 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N/E:P/RL:O/RC:C 21063 <a href="https://enklypesalt.com/">H&#229;kon M&#229;l&#248;y</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-54131 Use After Free 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55898 Out-of-bounds Read 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Information Disclosure 21368 Information Disclosure 10836 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10739 Information Disclosure 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 21368 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 10836 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11573 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11574 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11762 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11763 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11951 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11952 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 11953 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12420 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12421 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 12440 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 10739 6.1 5.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Dynamics NAV allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending a specially crafted login request to an affected Dynamics NAV or Business Central server. Successful exploitation could allow the attacker to execute arbitrary code on the target system. Authentication and user interaction are not required.</p> Microsoft Dynamics NAV Microsoft Yes CVE-2026-55944 Deserialization of Untrusted Data 11746 Remote Code Execution 11746 Critical 11746 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11746 Release Notes https://www.microsoft.com/en-us/download/details.aspx?id=108720 11746 No Security Update 11.0.50704.0 https://support.microsoft.com/en-US/servicing/dynamics/nav/update/2022/12/cumulative-update-60-for-microsoft-dynamics-nav-2018-build-49618 11746 Release Notes <a href="https://www.linkedin.com/in/john-nzyuko-412b563b1/">John Nzyuko</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55947 Heap-based Buffer Overflow 21368 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 Remote Code Execution 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Important 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-55949 Use of Uninitialized Resource 10836 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10739 10740 21368 Remote Code Execution 10836 Remote Code Execution 11573 Remote Code Execution 11574 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Remote Code Execution 10739 Remote Code Execution 10740 Remote Code Execution 21368 Important 10836 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10739 Important 10740 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10836 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10739 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10740 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 5002884 https://www.microsoft.com/en-us/download/details.aspx?id=108727 5002875 10836 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002884 10836 5002884 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002886 https://www.microsoft.com/en-us/download/details.aspx?id=108728 5002877 10739 10740 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002877 10739 10740 5002886 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Excel Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.</p> <p><strong>According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?</strong></p> <p>The word <strong>Remote</strong> in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Excel Microsoft Yes CVE-2026-56156 Heap-based Buffer Overflow 11762 11763 11951 11952 11953 12420 12421 12440 21368 Remote Code Execution 11762 Remote Code Execution 11763 Remote Code Execution 11951 Remote Code Execution 11952 Remote Code Execution 11953 Remote Code Execution 12420 Remote Code Execution 12421 Remote Code Execution 12440 Information Disclosure 21368 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/office365-proplus-security-updates 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper access control in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-56157 Improper Access Control 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 Henrique Pereira with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability <p>Improper neutralization of special elements in output used by a downstream component ('injection') in GitHub Copilot and Visual Studio allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>Exploitation of this vulnerability requires that an attacker convinces a user to open a maliciously crafted package file in Visual Studio.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by embedding malicious instructions in user input or external content that is processed, causing it to bypass guardrails, treat those instructions as trusted, and execute unintended actions such as retrieving sensitive data.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>Successful exploitation could bypass the path validation safeguards that check which files may be changed and require user approval for sensitive locations, allowing changes to protected files without the user’s knowledge or consent.</p> GitHub Copilot and Visual Studio Microsoft Yes CVE-2026-41109 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.128.1 https://code.visualstudio.com/updates/v1_128 11622 Release Notes Alexander Tan 1.0 2026-07-14T07:00:00 <p>Information published.</p> DHCP Server Service Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An unauthenticated attacker could exploit this vulnerability by sending specially crafted packet to a Dynamic Host Configuration Protocol (DHCP) Server configured to provide data for Option 43.</p> Windows DHCP Server Microsoft Yes CVE-2026-56159 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 12437 Remote Code Execution 12436 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 12437 Critical 12436 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Linzishan & Anemone & Zhiniang Peng (HUST) 1.1 2026-07-17T07:00:00 <p>Added acknowledgements. This is an informational change only.</p> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft XML Core Services Elevation of Privilege Vulnerability <p>Use after free in Microsoft XML Core Services allows an authorized attacker to elevate privileges locally.</p> Microsoft XML Core Services Microsoft Yes CVE-2026-50359 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Server Denial of Service Vulnerability <p>Null pointer dereference in Windows SMB Server allows an authorized attacker to deny service over a network.</p> Windows SMB Server Microsoft Yes CVE-2026-56168 NULL Pointer Dereference 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Denial of Service 11923 Denial of Service 11929 Denial of Service 11930 Denial of Service 11931 Denial of Service 12097 Denial of Service 12098 Denial of Service 12099 Denial of Service 12437 Denial of Service 20437 Denial of Service 20438 Denial of Service 12389 Denial of Service 12390 Denial of Service 12436 Denial of Service 20853 Denial of Service 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/mateusz-g-509241140/">Mateusz Garncarek</a> with <a href="https://digital-missiles.com/">Digital-Missiles</a> <a href="https://www.linkedin.com/in/mateusz-g-509241140/">Mateusz Garncarek</a> with <a href="https://digital-missiles.com/">Digital-Missiles</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows WebView Elevation of Privilege Vulnerability <p>Use after free in Windows WebView allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows WebView Microsoft Yes CVE-2026-56173 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099540 https://support.microsoft.com/help/5099540 11923 11924 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32k Elevation of Privilege Vulnerability <p>Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K - GRFX Microsoft Yes CVE-2026-56176 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 lubinradar 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> Windows NTFS Microsoft Yes CVE-2026-56175 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NTFS Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows NTFS allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows NTFS Microsoft Yes CVE-2026-56182 Integer Overflow or Wraparound Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Thanatos Tian (HKPolyU) &amp; npc0vo &amp; @2st__ with Diffract R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST Microsoft Red Team (MRT) with Microsoft Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> 1.1 2026-07-15T07:00:00 <p>Updated acknowledgment. This is an informational change only.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-56183 Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Remote Desktop Protocol Remote Code Execution Vulnerability <p>Use of uninitialized resource in Windows RDP allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending specially crafted Remote Desktop Protocol (RDP) traffic to a system where Network Level Authentication (NLA) is disabled. The malicious data can interact with improperly initialized memory in the affected component, leading to memory corruption that the attacker may leverage to control how memory is written. This type of issue can allow an attacker to write data to unintended locations in memory, potentially enabling further compromise of the affected system.</p> Windows RDP Microsoft Yes CVE-2026-56190 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.twitter.com/crowdstrike">CrowdStrike</a> with <a href="https://www.crowdstrike.com/">CrowdStrike</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Information Disclosure Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Exploiting this vulnerability could allow the disclosure of certain memory address within kernel space. Knowing the exact location of kernel memory could be potentially leveraged by an attacker for other malicious activities.</p> Windows Win32K Microsoft Yes CVE-2026-56184 Exposure of Sensitive Information to an Unauthorized Actor 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows MIDI Service Module Elevation of Privileges Vulnerability <p>Use after free in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.</p> Windows MIDI Service Module Microsoft Yes CVE-2026-56187 Use After Free 20437 20438 12389 12390 20853 20854 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20437 Important 20438 Important 12389 Important 12390 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Secure Channel Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Schannel allows an authorized attacker to disclose information over a network.</p> Windows Schannel Microsoft Yes CVE-2026-56186 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11568 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11569 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11571 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11572 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11923 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11929 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11930 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 11931 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12097 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12098 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12099 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12437 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20437 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20438 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12389 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12390 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 12436 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20853 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 20854 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10852 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10853 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10816 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10855 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10378 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10379 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10483 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Server Network driver Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Server Network driver allows an unauthorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by sending specially crafted malicious traffic to a vulnerable server.</p> Windows Server Network driver Microsoft Yes CVE-2026-56188 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.8 8.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://twitter.com/v12sec">Aaron Esau</a> with <a href="https://v12.sh/">V12</a> <a href="https://twitter.com/v12sec">Aaron Esau</a> with <a href="https://v12.sh/">V12</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code locally.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-56189 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 vipin kumar 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-50665 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11573 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11574 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11762 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11763 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11951 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11952 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11953 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12420 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12421 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12440 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10753 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10754 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> <a href="https://x.com/lmksecurity">Jeongmin Choi</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?</strong></p> <p>Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-56192 Out-of-bounds Read 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes <a href="https://x.com/lmksecurity">Jeongmin Choi</a> <a href="https://x.com/seadragnol">SeaDragnoL</a> with <a href="https://x.com/qriousec">Qrious Secure</a> <a href="https://x.com/gr4ss341">grass</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>Yes, the Preview Pane is an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-56195 Out-of-bounds Read 11573 11574 11762 11763 11951 11952 11953 12420 12421 12440 10753 10754 21368 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Information Disclosure 21368 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Important 21368 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10754 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 21368 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Admin Center (WAC) Remote Code Execution Vulnerability <p>Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network.</p> Windows Admin Center Microsoft Yes CVE-2026-56196 Relative Path Traversal 11629 Remote Code Execution 11629 Important 11629 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11629 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.7.4 https://techcommunity.microsoft.com/blog/windows-admin-center-blog/windows-admin-center-version-2606-is-now-generally-available/4530811 11629 Release Notes <a href="https://x.com/int20z">Batuhan Er</a> with <a href="https://hawktrace.com/">HawkTrace</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Admin Center (WAC) Remote Code Execution Vulnerability <p>Improper neutralization of special elements used in a command ('command injection') in Windows Admin Center allows an authorized attacker to execute code over a network.</p> Windows Admin Center Microsoft Yes CVE-2026-56197 Improper Neutralization of Special Elements used in a Command ('Command Injection') 11629 Remote Code Execution 11629 Important 11629 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11629 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.7.4 https://techcommunity.microsoft.com/blog/windows-admin-center-blog/windows-admin-center-version-2606-is-now-generally-available/4530811 11629 Release Notes sho odagiri with <a href="https://gmo-cybersecurity.com/">GMO Cybersecurity by Ierae inc</a> Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Defender for Endpoint for Mac Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally.</p> Microsoft Defender for Endpoint Microsoft Yes CVE-2026-56178 Time-of-check Time-of-use (TOCTOU) Race Condition 12014 Elevation of Privilege 12014 Important 12014 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N/E:U/RL:O/RC:C 12014 Release Notes https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide 12014 Maybe Security Update 101.26042.0020 https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-updates?view=o365-worldwide 12014 Release Notes <a href="https://www.linkedin.com/in/mihalis-h-551323164">Mihalis Haatainen</a> with <a href="https://bountyy.fi/">Bountyy Oy</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Fabric Data Warehouse Remote Code Execution Vulnerability <p>Stack-based buffer overflow in Microsoft Fabric Data Warehouse allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker who successfully exploits this vulnerability could achieve remote code execution without user interaction.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>Any authenticated attacker could trigger this vulnerability. It does not require admin or other elevated privileges.</p> Microsoft Fabric Data Warehouse Microsoft Yes CVE-2026-56642 Stack-based Buffer Overflow 21573 Remote Code Execution 21573 Important 21573 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21573 Release Notes https://github.com/sdebruyn/fabric-dw-mcp-cli/releases 21573 Maybe Security Update 8.0.206.113 https://github.com/sdebruyn/fabric-dw-mcp-cli/releases 21573 Release Notes Microsoft Red Team 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-56643 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> <a href="https://twitter.com/4zure9">Azure Yang</a> with <a href="http://www.cyberkl.com/">Kunlun Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-56644 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://www.linkedin.com/in/p1nkjelly/">Minwoo Jeong (P1nkjelly)</a> with <a href="https://hacking.kaist.ac.kr/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Terminal Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows Terminal allows an unauthorized attacker to execute code locally.</p> Windows Terminal Microsoft Yes CVE-2026-54124 Integer Overflow or Wraparound Heap-based Buffer Overflow 11923 11929 11930 11931 12097 12098 12099 12133 12134 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12133 Remote Code Execution 12134 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12133 Important 12134 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12133 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12134 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 Release Notes https://apps.microsoft.com/store/detail/windows-terminal/9N0DX20HK701?hl=en-us&gl=us 12133 12134 Maybe Security Update 1.24.11321.0 https://github.com/microsoft/terminal/releases/#release-v1.24.11321.0 12133 12134 Release Notes 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/randomdhiraj">Dhiraj Mishra</a> <a href="https://www.linkedin.com/in/danielr1123/">Daniel R</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NFS Server Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Network File System Microsoft Yes CVE-2026-56194 Heap-based Buffer Overflow Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Access Service Infrastructure Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Remote Access Service Infrastructure allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Remote Access Service Infrastructure Microsoft Yes CVE-2026-56647 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows NFS Server Elevation of Privilege Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Network File System Microsoft Yes CVE-2026-56648 Time-of-check Time-of-use (TOCTOU) Race Condition Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 k0shl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network File System Remote Code Execution Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Network File System allows an unauthorized attacker to execute code over a network.</p> Windows Network File System Microsoft Yes CVE-2026-56649 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 5.9 5.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Linzishan &amp; Anemone &amp; Zhiniang Peng (HUST) 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Photo Codec Information Disclosure Vulnerability <p>Use of uninitialized resource in Microsoft Windows Codecs Library allows an unauthorized attacker to disclose information locally.</p> Microsoft Windows Codecs Library Microsoft Yes CVE-2026-57083 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File Explorer Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows File Explorer allows an unauthorized attacker to disclose information locally.</p> Windows File Explorer Microsoft Yes CVE-2026-57084 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network File System Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Network File System Microsoft Yes CVE-2026-56650 Heap-based Buffer Overflow Numeric Truncation Error 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Win32k Elevation of Privilege Vulnerability <p>Exposure of sensitive information to an unauthorized actor in Windows Win32K allows an unauthorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Win32K Microsoft Yes CVE-2026-57095 Exposure of Sensitive Information to an Unauthorized Actor 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/vmpr0be">vmpr0be</a> wxz &amp; Thanatos Tian with Diffract 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-57090 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-57094 Heap-based Buffer Overflow Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows File History Service Elevation of Privilege Vulnerability <p>Stack-based buffer overflow in Windows File History Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows File History Service Microsoft Yes CVE-2026-57091 Stack-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Server Network Transport Driver (srvnet.sys) Remote Code Execution Vulnerability <p>Use after free in Windows SMB Server Network Transport Driver (srvnet.sys) allows an unauthorized attacker to execute code over a network.</p> Windows SMB Server Network Transport Driver (srvnet.sys) Microsoft Yes CVE-2026-57089 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Print Spooler Information Disclosure Vulnerability <p>Out-of-bounds read in Windows Print Spooler Components allows an authorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>Successful exploitation could allow an attacker to read a limited amount of information from the affected system’s memory. This information would be restricted in scope and is not expected to expose large amounts of sensitive data.</p> Windows Print Spooler Components Microsoft Yes CVE-2026-57085 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://linkedin.com/in/noam-pomerantz-8917971a0">Noam Pomerantz</a> with <a href="https://www.cyberwallglobal.com/">Cyberwallglobal</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows VMSwitch Elevation of Privilege Vulnerability <p>Use after free in Windows VMSwitch allows an authorized attacker to elevate privileges over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially gain elevated privileges on the host system beyond the guest virtual machine boundary.</p> <p><strong>How could an attacker exploit the vulnerability?</strong></p> <p>An attacker could exploit this vulnerability by running code in a guest virtual machine and sending a specially crafted network-related request to the host through the Hyper-V Virtual Switch. Under certain conditions, the request could cause the host to access memory that is no longer valid, potentially resulting in a denial of service or, in more severe cases, elevated privileges on the host system.</p> Windows VMSwitch Microsoft Yes CVE-2026-57092 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Critical 10378 Critical 10379 Critical 10483 Critical 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 9.9 8.6 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft Offensive Research &amp; Security Engineering 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Windows Media Foundation Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker could attempt to exploit this vulnerability by convincing a user to open a specially crafted media file. If the vulnerable component processes the file, memory corruption could occur, which may allow code to run on the affected system.</p> Microsoft Windows Media Foundation Microsoft Yes CVE-2026-57087 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Critical 11568 Critical 11569 Critical 11571 Critical 11572 Critical 11923 Critical 11929 Critical 11930 Critical 11931 Critical 12097 Critical 12098 Critical 12099 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Critical 10852 Critical 10853 Critical 10816 Critical 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Extensible Storage Engine (ESENT) Elevation of Privilege Vulnerability <p>Improper access control in Extensible Storage Engine (ESENT) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain ELEVATED privileges, which may allow them to perform actions beyond their original permissions.</p> Extensible Storage Engine (ESENT) Microsoft Yes CVE-2026-57088 Improper Access Control 11568 11569 11571 11572 11923 12437 12436 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 12436 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability <p>Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Ancillary Function Driver for WinSock Microsoft Yes CVE-2026-57093 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Soon with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Routing and Remote Access Service (RRAS) Microsoft Yes CVE-2026-57096 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 12098 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 12098 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.</p> Visual Studio Code Microsoft Yes CVE-2026-57101 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.128.1 https://code.visualstudio.com/updates/v1_128 11622 Release Notes <a href="https://ammaraskar.com/">Ammar Askar</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Visual Studio Code Security Feature Bypass Vulnerability <p>Inclusion of functionality from untrusted control sphere in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.</p> Visual Studio Code Microsoft Yes CVE-2026-57102 Inclusion of Functionality from Untrusted Control Sphere Exposure of Sensitive Information to an Unauthorized Actor 11622 Security Feature Bypass 11622 Important 11622 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11622 Release Notes https://code.visualstudio.com/Download 11622 Maybe Security Update 1.128.1 https://code.visualstudio.com/updates/v1_128 11622 Release Notes Rubin Ownz 1.0 2026-07-14T07:00:00 <p>Information published.</p> .NET Denial of Service Vulnerability <p>Access of resource using incompatible type ('type confusion') in .NET Core allows an unauthorized attacker to deny service over a network.</p> .NET Core Microsoft Yes CVE-2026-57108 Access of Resource Using Incompatible Type ('Type Confusion') 20839 20838 12414 12415 12416 12432 12433 12434 Denial of Service 20839 Denial of Service 20838 Denial of Service 12414 Denial of Service 12415 Denial of Service 12416 Denial of Service 12432 Denial of Service 12433 Denial of Service 12434 Important 20839 Important 20838 Important 12414 Important 12415 Important 12416 Important 12432 Important 12433 Important 12434 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20839 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20838 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12414 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12415 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12416 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12432 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12433 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12434 5104034 https://dotnet.microsoft.com/download/dotnet/10.0 20839 20838 Maybe Security Update 10.0.10 https://support.microsoft.com/kb/5104034 20839 20838 5104034 5104032 https://dotnet.microsoft.com/en-us/download/dotnet/8.0 12414 12415 12416 Maybe Security Update 8.0.29 https://support.microsoft.com/kb/5104032 12414 12415 12416 5104032 5104033 https://dotnet.microsoft.com/en-us/download/dotnet/9.0 12432 12433 12434 Maybe Security Update 9.0.18 https://support.microsoft.com/kb/5104033 12432 12433 12434 5104033 41ae55e9310ff27fa6f26af4727e5590 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability <p>Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privileges locally.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-57968 Buffer Over-read 12069 Elevation of Privilege 12069 Important 12069 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12069 Release Notes https://learn.microsoft.com/en-us/windows/wsl/install 12069 Security Update 2.7.8 https://github.com/microsoft/WSL/releases/tag/2.7.8 12069 Release Notes vurmusum vurmusum 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Subsystem for Linux (WSL2) Kernel Tampering Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Windows Subsystem for Linux allows an authorized attacker to perform tampering locally.</p> Windows Subsystem for Linux Microsoft Yes CVE-2026-57973 Time-of-check Time-of-use (TOCTOU) Race Condition 12069 Tampering 12069 Important 12069 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.3 5.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12069 Release Notes https://learn.microsoft.com/en-us/windows/wsl/install 12069 Maybe Security Update 2.7.10 https://Release 2.7.10 · microsoft/WSL 12069 Release Notes <a href="https://github.com/0x00000ff">Kangjun Heo</a> with <a href="https://plus.cnu.ac.kr/">Chungnam National University</a> <a href="https://github.com/riddhimaan-sth404">Riddhimaan Singh</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An attacker could attempt to trick a user into interacting with a malicious request that appears legitimate. When the user approves the request, the attacker could cause the app to obtain an access token on the user’s behalf and send it to a location controlled by the attacker, without the user being clearly informed about what access is being granted.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57974 Integer Overflow or Wraparound 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57975 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57977 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows RDP allows an authorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is uninitialized heap memory.</p> Windows RDP Microsoft Yes CVE-2026-57982 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Sanil Singh Tomar with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-57993 Server-Side Request Forgery (SSRF) 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.4 6.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft SharePoint Elevation of Privilege Vulnerability <p>Improper authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>The attacker would gain the rights of the user that is running the affected application.</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-58277 Improper Authorization 10950 11585 Elevation of Privilege 10950 Elevation of Privilege 11585 Important 10950 Important 11585 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10950 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11585 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 Rafael Resende Rafael Resende 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58281 Deserialization of Untrusted Data 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-11T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58282 Improper Access Control 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58283 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58284 Improper Authorization 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58285 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58286 Improper Access Control 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58287 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58288 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58289 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 9.0 7.8 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58290 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Information Disclosure Vulnerability <p>Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58291 Operation on a Resource after Expiration or Release 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.1 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to prepare the target environment to improve exploit reliability.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L) and availability (A:L), and major loss of integrity (I:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability enables an attacker to access data and disrupt services at a medium integrity level, resulting in some loss of confidentiality and availability. However, because the attacker can execute arbitrary code at that level, the vulnerability poses a total loss of integrity, allowing for potentially significant data manipulation.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58292 Improper Input Validation 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58293 External Control of File Name or Path 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.1 7.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability <p>Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58294 Use After Free 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability <p>Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An unauthenticated attacker is able to bypass the expected user access.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58295 Access of Resource Using Incompatible Type ('Type Confusion') 11655 Security Feature Bypass 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.3 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge for Android Information Disclosure Vulnerability <p>Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge for Android Microsoft Yes CVE-2026-58296 Exposure of Private Personal Information to an Unauthorized Actor 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge for Android Information Disclosure Vulnerability <p>Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge for Android Microsoft Yes CVE-2026-58297 Exposure of Private Personal Information to an Unauthorized Actor 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58298 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.2 6.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge for Android Remote Code Execution Vulnerability <p>Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and user interaction is required (UI:R). What is the target context of the remote code execution?</strong></p> <p>This attack requires a user to open a specially crafted file from the attacker to initiate remote code execution.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge for Android Microsoft Yes CVE-2026-58299 Time-of-check Time-of-use (TOCTOU) Race Condition 11655 Remote Code Execution 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge for Android Information Disclosure Vulnerability <p>Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge for Android Microsoft Yes CVE-2026-58300 Absolute Path Traversal 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.2 5.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge for Android Information Disclosure Vulnerability <p>Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>The type of information that could be disclosed if an attacker successfully exploited this vulnerability is sensitive information.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge for Android Microsoft Yes CVE-2026-58522 Relative Path Traversal 11655 Information Disclosure 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.8 5.9 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge for Android Security Feature Bypass Vulnerability <p>Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An unauthenticated attacker is able to bypass the expected user access.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge for Android Microsoft Yes CVE-2026-58523 Improper Access Control 11655 Security Feature Bypass 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58524 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 11655 Spoofing 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.4 4.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-03T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability <p>Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>What kind of security feature could be bypassed by successfully exploiting this vulnerability?</strong></p> <p>An unauthenticated attacker is able to bypass the expected user access.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and some loss of integrity (I:L), but no loss of availability (A:N). What does that mean for this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could view sensitive information, (Confidentiality), and make some changes to disclosed information (Integrity), but they would not be able to affect Availability.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.50</td> <td>07/08/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58525 Improper Access Control 11655 Security Feature Bypass 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.2 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.50 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.linkedin.com/in/asaf-cohen-4103b75b/">Asaf Cohen</a> with <a href="https://xbreach.ai/">XBreach.ai</a> Kugelblitz with Microsoft Kugelblitz with Microsoft 1.0 2026-07-08T07:00:00 <p>Information published.</p> Windows Runtime Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Runtime allows an authorized attacker to elevate privileges locally.</p> Windows Runtime Microsoft Yes CVE-2026-58527 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11923 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11923 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11923 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows USB Audio Class Driver Information Disclosure Vulnerability <p>Out-of-bounds read in Windows USB Audio Class driver (usbaudio.sys) allows an unauthorized attacker to disclose information with a physical attack.</p> Windows USB Audio Class driver (usbaudio.sys) Microsoft Yes CVE-2026-58528 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.8 5.9 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Jonghoi Kim <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Resilient File System (ReFS) Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an unauthorized attacker to execute code locally.</p> Windows Resilient File System (ReFS) Microsoft Yes CVE-2026-58530 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 <a href="https://x.com/_patchpoint_">Donghyeon Oh</a> with <a href="https://patchpoint.io/">Patchpoint</a> Jonghoi Kim R4nger with Kunlun Lab &amp; Zhiniang Peng with HUST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Bluetooth Service Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Windows Bluetooth Service allows an authorized attacker to elevate privileges locally.</p> Windows Bluetooth Service Microsoft Yes CVE-2026-58538 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous Anonymous <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> <a href="https://www.linkedin.com/in/brandon-fisher-666bb01b8/">Brandon Fisher</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> Windows RDP Microsoft Yes CVE-2026-58533 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> Windows RDP Microsoft Yes CVE-2026-58535 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Use of uninitialized resource in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> Windows RDP Microsoft Yes CVE-2026-58546 Use of Uninitialized Resource 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Client Information Disclosure Vulnerability <p>Out-of-bounds read in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> Windows RDP Microsoft Yes CVE-2026-58539 Out-of-bounds Read 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Information Disclosure 11568 Information Disclosure 11569 Information Disclosure 11571 Information Disclosure 11572 Information Disclosure 11923 Information Disclosure 11929 Information Disclosure 11930 Information Disclosure 11931 Information Disclosure 12097 Information Disclosure 12098 Information Disclosure 12099 Information Disclosure 12437 Information Disclosure 20437 Information Disclosure 20438 Information Disclosure 12389 Information Disclosure 12390 Information Disclosure 12436 Information Disclosure 20853 Information Disclosure 20854 Information Disclosure 10852 Information Disclosure 10853 Information Disclosure 10816 Information Disclosure 10855 Information Disclosure 10378 Information Disclosure 10379 Information Disclosure 10483 Information Disclosure 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 6.5 5.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 0ccbbf129444eb66344ccafb92b00df4 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Installer Elevation of Privilege Vulnerability <p>Improper authorization in Windows Installer allows an authorized attacker to elevate privileges locally.</p> Windows Installer Microsoft Yes CVE-2026-58540 Improper Authorization 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://infosec.exchange/@jagotu">JaGoTu</a> with <a href="https://www.dcit.cz/">DCIT, a.s.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows SMB Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows SMB allows an authorized attacker to elevate privileges over a network.</p> Windows SMB Microsoft Yes CVE-2026-58531 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://x.com/gr4ss341">grass341</a> with <a href="https://viettelsecurity.com/">Viettel Cyber Security</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Elevation of Privilege Vulnerability <p>Integer overflow or wraparound in Windows Kernel allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Kernel Microsoft Yes CVE-2026-58532 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://aprl.pet/">aprilpet</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft NAT Helper Components (ipnathlp.dll) Elevation of Privilege Vulnerability <p>Use after free in Microsoft NAT Helper Components (ipnathlp.dll) allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Microsoft NAT Helper Components (ipnathlp.dll) Microsoft Yes CVE-2026-58537 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Input Method Editor (IME) Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.</p> Microsoft Input Method Editor (IME) Microsoft Yes CVE-2026-58534 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Pwnforr777 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-58536 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/cplearns2h4ck">Chen Le Qi (@cplearns2h4ck)</a> with <a href="https://starlabs.sg/">STAR Labs SG Pte. Ltd.</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Universal Plug and Play (UPnP) Device Host Elevation of Privilege Vulnerability <p>Heap-based buffer overflow in Universal Plug and Play (upnp.dll) allows an authorized attacker to elevate privileges locally.</p> Universal Plug and Play (upnp.dll) Microsoft Yes CVE-2026-58547 Heap-based Buffer Overflow 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Q4n with Kunlun Lab 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Kernel Security Feature Bypass Vulnerability <p>Improper access control in Windows Kernel allows an authorized attacker to bypass a security feature locally.</p> Windows Kernel Microsoft Yes CVE-2026-58545 Improper Access Control 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10852 Security Feature Bypass 10853 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11568 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11569 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11571 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11572 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11923 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11929 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11930 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 11931 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12097 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12098 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12099 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20437 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20438 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12389 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12390 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 12436 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 20854 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10852 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10853 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10816 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10855 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10378 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10379 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10483 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Management Services Elevation of Privilege Vulnerability <p>Use after free in Windows Management Services allows an authorized attacker to elevate privileges locally.</p> Windows Management Services Microsoft Yes CVE-2026-58544 Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Media Remote Code Execution Vulnerability <p>Heap-based buffer overflow in Windows Media allows an unauthorized attacker to execute code locally.</p> Windows Media Microsoft Yes CVE-2026-58542 Heap-based Buffer Overflow 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Critical 12437 Critical 20437 Critical 20438 Critical 12389 Critical 12390 Critical 12436 Critical 20853 Critical 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://x.com/hareh4ru">Kyeongmin Kim (@hareh4ru)</a> with <a href="https://kaist-hacking.github.io/">KAIST Hacking Lab</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Universal Print Management Service Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows USB Print Driver allows an authorized attacker to elevate privileges with a physical attack.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows USB Print Driver Microsoft Yes CVE-2026-58543 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Use After Free 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 6.3 5.5 CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://twitter.com/guhe120">AIフィジカルインターフェイス二号機</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft DWM Core Library Elevation of Privilege Vulnerability <p>Access of resource using incompatible type ('type confusion') in Windows DWM allows an authorized attacker to elevate privileges locally.</p> Windows DWM Microsoft Yes CVE-2026-58541 Access of Resource Using Incompatible Type ('Type Confusion') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Varun Goel yhw &amp; txz 1.0 2026-07-14T07:00:00 <p>Information published.</p> Remote Desktop Client Remote Code Execution Vulnerability <p>Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network.</p> Windows RDP Microsoft Yes CVE-2026-58594 Integer Overflow or Wraparound 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Remote Code Execution 11568 Remote Code Execution 11569 Remote Code Execution 11571 Remote Code Execution 11572 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Remote Code Execution 10852 Remote Code Execution 10853 Remote Code Execution 10816 Remote Code Execution 10855 Remote Code Execution 10378 Remote Code Execution 10379 Remote Code Execution 10483 Remote Code Execution 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Sanil Singh Tomar with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability <p>Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>How could an attacker exploit this vulnerability via the Network?</strong></p> <p>An attacker could host a specially crafted website designed to exploit the vulnerability through Microsoft Edge and then convince a user to view the website. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/11/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to craft deceptive or invisible form elements and user to perform two sequential taps.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain the privileges of the authenticated user.</p> <p><strong>According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58596 Untrusted Pointer Dereference 11655 Elevation of Privilege 11655 Important 11655 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 8.3 7.2 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes deepsleep 1.0 2026-07-11T07:00:00 <p>Information published.</p> Microsoft Edge (Chromium-based) Spoofing Vulnerability <p>Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.</p> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?</strong></p> <p>Information in the victim's browser associated with the vulnerable URL can be read by the malicious JavaScript code and sent to the attacker.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.</p> Microsoft Edge (Chromium-based) Microsoft Yes CVE-2026-58597 Insufficient UI Warning of Dangerous Operations 11655 Spoofing 11655 Low 11655 Publicly Disclosed:No;Exploited:No 4.3 3.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes <a href="https://www.linkedin.com/in/azza-tegar-naufal-ataullah-4b0488317/">Azza Tegar Naufal Ataullah</a> 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-13954 Insufficient policy enforcement in XML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13954 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-13796 Integer overflow in Chromecast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13796 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:56 <p>Information published.</p> Chromium: CVE-2026-13799 Use after free in QUIC <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13799 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:00 <p>Information published.</p> Chromium: CVE-2026-13800 Inappropriate implementation in Updater <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13800 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:01 <p>Information published.</p> Chromium: CVE-2026-13806 Insufficient validation of untrusted input in Accessibility <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13806 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:07 <p>Information published.</p> Chromium: CVE-2026-13810 Inappropriate implementation in Input <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13810 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:08 <p>Information published.</p> Chromium: CVE-2026-13811 Use after free in IME <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13811 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:10 <p>Information published.</p> Chromium: CVE-2026-13815 Use after free in Blink <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13815 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:12 <p>Information published.</p> Chromium: CVE-2026-13818 Inappropriate implementation in Passwords <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13818 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:14 <p>Information published.</p> Chromium: CVE-2026-13814 Use after free in Views <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13814 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:30 <p>Information published.</p> Chromium: CVE-2026-13817 Insufficient validation of untrusted input in Glic <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13817 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:13 <p>Information published.</p> Chromium: CVE-2026-13821 Use after free in Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13821 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:17 <p>Information published.</p> Chromium: CVE-2026-13820 Out of bounds read in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13820 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:16 <p>Information published.</p> Chromium: CVE-2026-13823 Use after free in Glic <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13823 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:18 <p>Information published.</p> Chromium: CVE-2026-13824 Insufficient validation of untrusted input in Extensions <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13824 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:19 <p>Information published.</p> Chromium: CVE-2026-13828 Inappropriate implementation in Enterprise <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13828 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:20 <p>Information published.</p> Chromium: CVE-2026-13829 Insufficient validation of untrusted input in Settings <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13829 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:22 <p>Information published.</p> Chromium: CVE-2026-13830 Use after free in Chromoting <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13830 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:23 <p>Information published.</p> Chromium: CVE-2026-13831 Use after free in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13831 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:24 <p>Information published.</p> Chromium: CVE-2026-13834 Insufficient validation of untrusted input in ANGLE <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13834 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:27 <p>Information published.</p> Chromium: CVE-2026-13832 Use after free in Headless <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13832 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:31 <p>Information published.</p> Chromium: CVE-2026-13836 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13836 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:30 <p>Information published.</p> Chromium: CVE-2026-13835 Inappropriate implementation in XML <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13835 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:28 <p>Information published.</p> Chromium: CVE-2026-13837 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13837 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:31 <p>Information published.</p> Chromium: CVE-2026-13838 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13838 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:32 <p>Information published.</p> Chromium: CVE-2026-13839 Inappropriate implementation in CSS <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13839 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:33 <p>Information published.</p> Chromium: CVE-2026-13840 Insufficient policy enforcement in Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13840 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:35 <p>Information published.</p> Chromium: CVE-2026-13841 Integer overflow in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13841 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:36 <p>Information published.</p> Chromium: CVE-2026-13844 Use after free in Updater <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13844 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:37 <p>Information published.</p> Chromium: CVE-2026-13845 Use after free in DOM <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2026">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.48</td> <td>07/03/2026</td> <td>150.0.7871.47</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-13845 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.48 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-03T07:00:33 <p>Information published.</p> Visual Studio Remote Code Execution Vulnerability <p>Protection mechanism failure in Visual Studio allows an unauthorized attacker to execute code locally.</p> Visual Studio Microsoft Yes CVE-2026-47305 Protection Mechanism Failure 21581 12459 16767 Remote Code Execution 21581 Remote Code Execution 12459 Remote Code Execution 16767 Important 21581 Important 12459 Important 16767 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 21581 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12459 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 16767 Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2026 version 18.7 21581 Maybe Security Update 18.7.4 https://learn.microsoft.com/en-us/visualstudio/releases/2026/release-notes 21581 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.12 12459 Maybe Security Update 17.12.22 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 12459 Release Notes Release Notes https://my.visualstudio.com/Downloads?q=Visual Studio 2022 version 17.14 16767 Maybe Security Update 17.14.36 https://learn.microsoft.com/en-us/visualstudio/releases/2022/release-notes 16767 Release Notes <a href="https://www.linkedin.com/in/arun-t-thankachan/">Arun T</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability <p>Use after free in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Cloud Files Mini Filter Driver Microsoft Yes CVE-2026-58613 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://talosintelligence.com/">Marcin &#39;Icewall&#39; Noga </a> with <a href="https://www.talosintelligence.com/vulnerability_reports">Cisco Talos</a> <a href="https://talosintelligence.com/">Marcin &#39;Icewall&#39; Noga </a> with <a href="https://www.talosintelligence.com/vulnerability_reports">Cisco Talos</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> M365 Copilot for iOS Elevation of Privilege Vulnerability <p>Improper access control in Microsoft 365 Copilot for iOS allows an unauthorized attacker to elevate privileges over a network.</p> <p><strong>According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?</strong></p> <p>The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.</p> Microsoft 365 Copilot for iOS Microsoft Yes CVE-2026-58617 Improper Access Control 21043 Elevation of Privilege 21043 Important 21043 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.1 7.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 21043 Release Notes https://apps.apple.com/us/app/microsoft-365-copilot/id541164041 21043 Maybe Security Update 2.111.4 https://apps.apple.com/us/app/microsoft-365-copilot/id541164041 21043 Release Notes Ofek Levin with <a href="https://enclave.ai/">Enclave</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Sensor Data Service Elevation of Privilege Vulnerability <p>Use after free in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Sensor Data Service Microsoft Yes CVE-2026-58619 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 k0shl k0shl 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Services Remote Code Execution Vulnerability <p>Use after free in Windows Remote Desktop Services allows an authorized attacker to execute code over a network.</p> <p><strong>How could an attacker exploit this vulnerability?</strong></p> <p>An authenticated attacker could exploit this vulnerability by connecting to a target system via Remote Desktop Protocol (RDP) and sending specially crafted requests that trigger a use-after-free condition in the Remote Desktop service, allowing the attacker to execute arbitrary code on the target system.</p> <p><strong>According to the CVSS metric, privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An attacker must first have access to a Windows system as an authenticated user and then use that system to establish a connection to the target server and send the malicious data that triggers the vulnerability.</p> Windows Remote Desktop Services Microsoft Yes CVE-2026-58626 Use After Free 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Remote Code Execution 11923 Remote Code Execution 11929 Remote Code Execution 11930 Remote Code Execution 11931 Remote Code Execution 12097 Remote Code Execution 12098 Remote Code Execution 12099 Remote Code Execution 12437 Remote Code Execution 20437 Remote Code Execution 20438 Remote Code Execution 12389 Remote Code Execution 12390 Remote Code Execution 12436 Remote Code Execution 20853 Remote Code Execution 20854 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.8 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://www.linkedin.com/in/danielr1123/">Daniel R</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows DHCP Server Denial of Service Vulnerability <p>Uncontrolled resource consumption in Windows DHCP Server allows an unauthorized attacker to deny service over a network.</p> Windows DHCP Server Microsoft Yes CVE-2026-58627 Uncontrolled Resource Consumption 11568 11569 11571 11572 11923 12437 12436 10852 10853 10816 10855 10378 10379 10483 10543 Denial of Service 11568 Denial of Service 11569 Denial of Service 11571 Denial of Service 11572 Denial of Service 11923 Denial of Service 12437 Denial of Service 12436 Denial of Service 10852 Denial of Service 10853 Denial of Service 10816 Denial of Service 10855 Denial of Service 10378 Denial of Service 10379 Denial of Service 10483 Denial of Service 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 12437 Important 12436 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11568 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11569 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11571 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11572 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11923 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12437 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12436 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10852 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10853 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10816 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10855 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10378 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10379 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10483 7.5 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Anil Lulla with Microsoft 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Wireless Network Manager Elevation of Privilege Vulnerability <p>Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Wireless Networking allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?</strong></p> <p>In this case, a successful attack could be performed from a low privilege <a href="https://docs.microsoft.com/windows/win32/secauthz/appcontainer-isolation">AppContainer</a>. The attacker could elevate their privileges and execute code or access resources at a higher integrity level than that of the AppContainer execution environment.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.</p> Windows Wireless Networking Microsoft Yes CVE-2026-58628 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Arpit Gupta 1.0 2026-07-14T07:00:00 <p>Information published.</p> DirectX Graphics Kernel Elevation of Privilege Vulnerability <p>Use after free in Windows DirectX allows an authorized attacker to elevate privileges locally.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could execute code in the kernel.</p> Windows DirectX Microsoft Yes CVE-2026-58629 Use After Free 11568 11569 11571 11572 11923 11924 11929 11930 11931 12097 12098 12099 12437 20437 20438 12242 12243 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11924 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12242 Elevation of Privilege 12243 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11924 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12242 Important 12243 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11924 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12242 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12243 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 11924 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 11924 5099540 5099540 https://support.microsoft.com/help/5099540 11923 11924 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5099414 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099414 5093998 12242 12243 Yes Security Update 10.0.22631.7376 https://support.microsoft.com/help/5099414 12242 12243 5099414 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 <a href="https://gengstah.github.io/">gengstah</a> Dung Do of Calif.io 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability <p>Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.</p> Windows Win32K Microsoft Yes CVE-2026-58632 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.</p> Desktop Window Manager Microsoft Yes CVE-2026-58633 Use After Free 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 <a href="https://mylostchristmas.tistory.com/20">Seung Chan Kim</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Desktop Window Manager Elevation of Privilege Vulnerability <p>Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.</p> Desktop Window Manager Microsoft Yes CVE-2026-58634 Use After Free 20853 20854 Elevation of Privilege 20853 Elevation of Privilege 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.8 6.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Varun Goel 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Client-Side Caching Elevation of Privilege Vulnerability <p>Use after free in Windows Client-Side Caching (CSC) Service allows an authorized attacker to elevate privileges locally.</p> <p><strong>What privileges could be gained by an attacker who successfully exploited the vulnerability?</strong></p> <p>A domain user could use this vulnerability to elevate privileges to SYSTEM assigned integrity level.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability requires an attacker to win a race condition.</p> Windows Client-Side Caching (CSC) Service Microsoft Yes CVE-2026-58637 Use After Free 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10852 10853 10816 10855 10378 10379 10483 10543 Elevation of Privilege 11568 Elevation of Privilege 11569 Elevation of Privilege 11571 Elevation of Privilege 11572 Elevation of Privilege 11923 Elevation of Privilege 11929 Elevation of Privilege 11930 Elevation of Privilege 11931 Elevation of Privilege 12097 Elevation of Privilege 12098 Elevation of Privilege 12099 Elevation of Privilege 12437 Elevation of Privilege 20437 Elevation of Privilege 20438 Elevation of Privilege 12389 Elevation of Privilege 12390 Elevation of Privilege 12436 Elevation of Privilege 20853 Elevation of Privilege 20854 Elevation of Privilege 10852 Elevation of Privilege 10853 Elevation of Privilege 10816 Elevation of Privilege 10855 Elevation of Privilege 10378 Elevation of Privilege 10379 Elevation of Privilege 10483 Elevation of Privilege 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10852 Important 10853 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11568 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11569 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11571 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11572 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11923 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11929 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11930 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 11931 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12097 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12098 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12099 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10852 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10853 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10816 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10855 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10378 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10379 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10483 7.0 6.1 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10852 10853 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10852 10853 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 z1r0 <a href="https://www.linkedin.com/in/byunghyun10211/">Byunghyun Kang</a> with KAIST 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Boot Loader Security Feature Bypass Vulnerability <p>Missing cryptographic step in Windows Boot Loader allows an authorized attacker to bypass a security feature locally.</p> Windows Boot Loader Microsoft Yes CVE-2026-58638 Missing Cryptographic Step 11568 11569 11571 11572 11923 11929 11930 11931 12097 12098 12099 12437 20437 20438 12389 12390 12436 20853 20854 10816 10855 10378 10379 10483 10543 Security Feature Bypass 11568 Security Feature Bypass 11569 Security Feature Bypass 11571 Security Feature Bypass 11572 Security Feature Bypass 11923 Security Feature Bypass 11929 Security Feature Bypass 11930 Security Feature Bypass 11931 Security Feature Bypass 12097 Security Feature Bypass 12098 Security Feature Bypass 12099 Security Feature Bypass 12437 Security Feature Bypass 20437 Security Feature Bypass 20438 Security Feature Bypass 12389 Security Feature Bypass 12390 Security Feature Bypass 12436 Security Feature Bypass 20853 Security Feature Bypass 20854 Security Feature Bypass 10816 Security Feature Bypass 10855 Security Feature Bypass 10378 Security Feature Bypass 10379 Security Feature Bypass 10483 Security Feature Bypass 10543 Important 11568 Important 11569 Important 11571 Important 11572 Important 11923 Important 11929 Important 11930 Important 11931 Important 12097 Important 12098 Important 12099 Important 12437 Important 20437 Important 20438 Important 12389 Important 12390 Important 12436 Important 20853 Important 20854 Important 10816 Important 10855 Important 10378 Important 10379 Important 10483 Important 10543 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation More Likely 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11568 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11569 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11571 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11572 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11923 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11929 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11930 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 11931 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12097 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12098 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12099 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12437 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20437 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20438 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12389 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12390 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 12436 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20853 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 20854 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10816 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10855 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10378 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10379 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10483 6.0 5.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C 10543 5099538 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099538 5094123 11568 11569 11571 11572 Yes Security Update 10.0.17763.9020 https://support.microsoft.com/help/5099538 11568 11569 11571 11572 5099538 5099540 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099540 5094128 11923 Yes Security Update 10.0.20348.5386 https://support.microsoft.com/help/5099540 11923 5099540 5099540 https://support.microsoft.com/help/5099540 11923 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 11929 11930 11931 Yes Security Update 10.0.19044.7548 https://support.microsoft.com/help/5099539 11929 11930 11931 5099539 5099539 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099539 5094127 12097 12098 12099 Yes Security Update 10.0.19045.7548 https://support.microsoft.com/help/5099539 12097 12098 12099 5099539 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 5099535 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099535 5094122 10816 10855 Yes Security Update 10.0.14393.9339 https://support.microsoft.com/help/5099535 10816 10855 5099535 5099445 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099445 5094042 10378 10379 Yes Monthly Rollup 6.2.9200.26226 https://support.microsoft.com/help/5099445 10378 10379 5099445 5099445 https://support.microsoft.com/help/5099445 10378 10379 5099444 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099444 5094041 10483 10543 Yes Monthly Rollup 6.3.9600.23291 https://support.microsoft.com/help/5099444 10483 10543 5099444 5099444 https://support.microsoft.com/help/5099444 10483 10543 Stas Lyakhov with <a href="https://eclypsium.com/">Eclypsium</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Network Address Translation (NAT) Spoofing Vulnerability <p>Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.</p> <p><strong>According to the CVSS metric, the attack vector is adjacent (AV:A). What does that mean for this vulnerability?</strong></p> <p>This vulnerability's attack is limited at the protocol level to a logically adjacent topology. This means it cannot simply be done across the internet, but instead needs something specific tied to the target. Good examples would include the same shared physical network (such as Bluetooth or IEEE 802.11), logical network (local IP subnet), or from within a secure or otherwise limited administrative domain (MPLS, secure VPN to an administrative network zone). This is common to many attacks that require machine-in-the-middle (MITM) type setups or that rely on initially gaining a foothold in another environment.</p> <p><strong>According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?</strong></p> <p>The attacker must inject themselves into the logical network path between the target and the resource requested by the victim to read or modify network communications. This is called a machine-in-the-middle (MITM) attack.</p> Windows Network Address Translation (NAT) Microsoft Yes CVE-2026-56181 Origin Validation Error 12437 20437 20438 12389 12390 12436 20853 20854 Spoofing 12437 Spoofing 20437 Spoofing 20438 Spoofing 12389 Spoofing 12390 Spoofing 12436 Spoofing 20853 Spoofing 20854 Moderate 12437 Moderate 20437 Moderate 20438 Moderate 12389 Moderate 12390 Moderate 12436 Moderate 20853 Moderate 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12437 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20437 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20438 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12389 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12390 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 12436 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20853 8.3 7.2 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C 20854 5099536 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5099536 5094125 12437 12436 Yes Security Update 10.0.26100.33158 https://support.microsoft.com/help/5099536 12437 12436 5099536 5099536 https://support.microsoft.com/help/5099536 12437 12436 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 20437 20438 Yes Security Update 10.0.26200.8875 https://support.microsoft.com/help/5101650 20437 20438 5101650 5101650 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101650 5094126 12389 12390 Yes Security Update 10.0.26100.8875 https://support.microsoft.com/help/5101650 12389 12390 5101650 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Malcolm Stagg with <a href="https://www.sodium24.com/">SODIUM-24, LLC</a> 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft Office Information Disclosure Vulnerability <p>Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), no loss to integrity (I:N) and lead to some loss of availability (A:L). What is the impact of this vulnerability?</strong></p> <p>Successful exploitation of this vulnerability could allow an attacker to access limited sensitive information from system memory and may cause intermittent interruptions or reduced performance in the affected application. However, it would not allow the attacker to modify data.</p> <p><strong>What type of information could be disclosed by this vulnerability?</strong></p> <p>An attacker who successfully exploited this vulnerability could potentially read small portions of heap memory.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?</strong></p> <p>An attacker must send a user a malicious Office file and convince them to open it.</p> <p><strong>Is the Preview Pane an attack vector for this vulnerability?</strong></p> <p>No, the Preview Pane is not an attack vector.</p> Microsoft Office Microsoft Yes CVE-2026-55121 Out-of-bounds Read 21368 10950 11585 11573 11574 11762 11763 11951 11952 11953 11961 12420 12421 12440 10753 10754 Information Disclosure 21368 Information Disclosure 10950 Information Disclosure 11585 Information Disclosure 11573 Information Disclosure 11574 Information Disclosure 11762 Information Disclosure 11763 Information Disclosure 11951 Information Disclosure 11952 Information Disclosure 11953 Information Disclosure 11961 Information Disclosure 12420 Information Disclosure 12421 Information Disclosure 12440 Information Disclosure 10753 Information Disclosure 10754 Important 21368 Important 10950 Important 11585 Important 11573 Important 11574 Important 11762 Important 11763 Important 11951 Important 11952 Important 11953 Important 11961 Important 12420 Important 12421 Important 12440 Important 10753 Important 10754 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 21368 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10950 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11585 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11573 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11574 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11762 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11763 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11951 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11952 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11953 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 11961 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12420 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12421 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 12440 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10753 5.5 4.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C 10754 Release Notes https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Maybe Security Update 16.111.26071215 https://www.microsoft.com/en-us/microsoft-365/mac/microsoft-365-for-mac?msockid=35f9adb0e74b61392038b90de6fe608c 21368 Release Notes 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002892 https://www.microsoft.com/en-us/download/details.aspx?id=108724 5002881 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002892 10950 5002892 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002885 https://www.microsoft.com/en-us/download/details.aspx?id=108722 5002876 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002885 11585 5002885 Click to Run 11573 11574 11762 11763 11952 11953 12420 12421 No Security Update https://aka.ms/OfficeSecurityReleases https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates 11573 11574 11762 11763 11952 11953 12420 12421 Click to Run Release Notes https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Maybe Security Update 16.111.26071215 https://go.microsoft.com/fwlink/p/?linkid=831049 11951 12440 Release Notes 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 5002887 https://www.microsoft.com/en-us/download/details.aspx?id=108733 5002878 10753 10754 Maybe Security Update 16.0.5561.1000 https://support.microsoft.com/help/5002887 10753 10754 5002887 Haein Lee 1.0 2026-07-14T07:00:00 <p>Information published.</p> Microsoft SharePoint Server Spoofing Vulnerability <p>Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.</p> <p><strong>I am running SharePoint Server 2016. Do the updates for SharePoint Enterprise Server 2016 also apply to the version I am running?</strong></p> <p>Yes. The same KB number applies to both SharePoint Server 2016 and SharePoint Enterprise Server 2016. Customers running either version should install the security update to be protected from this vulnerability.</p> <p><strong>According to the CVSS metric, user interaction is required (UI:R) and privileges required is low (PR:L). What does that mean for this vulnerability?</strong></p> <p>An authorized attacker must send the user a malicious link and convince the user to open it.</p> <p><strong>According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?</strong></p> <p>An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).</p> Microsoft Office SharePoint Microsoft Yes CVE-2026-62826 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') 10950 11585 11961 Spoofing 10950 Spoofing 11585 Spoofing 11961 Important 10950 Important 11585 Important 11961 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 10950 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11585 4.6 4.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C 11961 5002891 https://www.microsoft.com/en-us/download/details.aspx?id=108723 5002880 10950 Maybe Security Update 16.0.5561.1001 https://support.microsoft.com/help/5002891 10950 5002891 5002883 https://www.microsoft.com/en-us/download/details.aspx?id=108726 5002874 11585 Maybe Security Update 16.0.10417.20175 https://support.microsoft.com/help/5002883 11585 5002883 5002882 https://www.microsoft.com/en-us/download/details.aspx?id=108730 5002873 11961 Maybe Security Update 16.0.19725.20434 https://support.microsoft.com/help/5002882 11961 5002882 5002882 https://support.microsoft.com/help/5002882 11961 41ae55e9310ff27fa6f26af4727e5590 1.1 2026-07-16T07:00:00 <p>Information published. This CVE was addressed by updates that were released in July 2026, but the CVE was inadvertently omitted from the July 2026 Security Updates. This is an informational change only. Customers who have already installed the July 2026 updates do not need to take any further action.</p> 1.0 2026-07-16T07:00:00 <p>Information published.</p> Chromium: CVE-2026-15777 Use after free in UI <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15777 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T07:00:15 <p>Information published.</p> Chromium: CVE-2026-15772 Use after free in GPU <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15772 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:10 <p>Information published.</p> Chromium: CVE-2026-15771 Insufficient validation of untrusted input in Media <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15771 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.80 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:09 <p>Information published.</p> Chromium: CVE-2026-15902 Use after free in Cast <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15902 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:40 <p>Information published.</p> Chromium: CVE-2026-15769 Insufficient validation of untrusted input in Linux Toolkit Theming <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15769 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:06 <p>Information published.</p> Chromium: CVE-2026-15768 Insufficient policy enforcement in HTML-in-Canvas <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15768 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:05 <p>Information published.</p> Chromium: CVE-2026-15766 Uninitialized Use in Skia <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15766 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:03 <p>Information published.</p> Chromium: CVE-2026-15764 Use after free in Ozone <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.80</td> <td>07/16/2026</td> <td>150.0.7871.125</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15764 11655 11655 11655 Release Notes 11655 No Security Update https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-16T18:36:00 <p>Information published.</p> Windows Active Directory Federation Services (ADFS) Information Disclosure Vulnerability <p>Out-of-bounds read in Active Directory Federation Services (AD FS) allows an authorized attacker to disclose information over a network.</p> Active Directory Federation Services (AD FS) Microsoft Yes CVE-2026-58529 Out-of-bounds Read 20853 20854 Information Disclosure 20853 Information Disclosure 20854 Important 20853 Important 20854 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20853 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L/E:U/RL:O/RC:C 20854 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5101649 20853 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20853 5101649 5101649 https://catalog.update.microsoft.com/v7/site/Search.aspx?q=KB5101649 5095051 20854 Yes Security Update 10.0.28000.2525 https://support.microsoft.com/help/5101649 20854 5101649 Anonymous 1.0 2026-07-14T07:00:00 <p>Information published.</p> Windows Remote Desktop Protocol (RDP) Information Disclosure Vulnerability <p>Exposure of private personal information to an unauthorized actor in Windows RDP allows an unauthorized attacker to disclose information over a network.</p> <p><strong>Can I install the update via a PowerShell module?</strong></p> <p>Yes, please see instructions here: <a href="https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/remote-desktop-web-client-admin#how-to-update-the-remote-desktop-web-client">How to Update the RD Web Client</a>. The link to the PowerShell Gallery is <a href="https://www.powershellgallery.com/packages/RDWebClientManagement/1.0.4">here</a>.</p> Windows RDP Microsoft Yes CVE-2026-56171 Exposure of Private Personal Information to an Unauthorized Actor 11629 21584 Information Disclosure 11629 Information Disclosure 21584 Important 11629 Important 21584 Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C 11629 7.1 6.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C 21584 Release Notes http://aka.ms/downloadWAC 11629 No Security Update 2.7.4 https://techcommunity.microsoft.com/blog/windows-admin-center-blog/windows-admin-center-version-2606-is-now-generally-available/4530811 11629 Release Notes Release Notes https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/web-client-whats-new 21584 Maybe Security Update 2.1.65.2 https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/web-client-whats-new 21584 Release Notes Anonymous 1.0 2026-07-16T07:00:00 <p>Information published.</p> Chromium: CVE-2026-15905 Use after free in Aura <p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2025">Google Chrome Releases</a> for more information.</p> <p><strong>Why is this Chrome CVE included in the Security Update Guide?</strong></p> <p>The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable.</p> <p><strong>How can I see the version of the browser?</strong></p> <ol> <li>In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window</li> <li>Click on <strong>Help and Feedback</strong></li> <li>Click on <strong>About Microsoft Edge</strong></li> </ol> <p><strong>What is the version information for this release?</strong></p> <table> <thead> <tr> <th>Microsoft Edge Version</th> <th>Date Released</th> <th>Based on Chromium Version</th> </tr> </thead> <tbody> <tr> <td>150.0.4078.83</td> <td>07/17/2026</td> <td>150.0.7871.128/.129</td> </tr> </tbody> </table> Microsoft Edge (Chromium-based) Chrome Yes CVE-2026-15905 11655 11655 11655 Release Notes 11655 No Security Update 150.0.4078.83 https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security 11655 Release Notes 1.0 2026-07-17T17:42:44 <p>Information published.</p>